SG3210 VLAN + SG3210 Setup for separated WiFi users
In its simplest form, my issue is this: I attempt to set my VLANs up like so: https://community.tp-link.com/en/business/kb/detail/69
But I can never manage to get this to work. I am always unable to ping the router from any of the ports.
Port | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 |
VLAN | 1, 2 | 1, 2 | 1, 2 | 1, 2 | 1, 2 | 1, 3 | 1, 3 | 1, 2, 3 |
PVID | 2 | 2 | 2 | 2 | 2 | 3 | 3 | 1 |
Link Type | General | General | General | General | General | General | General | General |
Connected to | PC | PC | PC | PC | PC | WA801ND | <spare> | Router |
Only when I change the PVID to 1 for all ports, can I even ping the router, but then this strikes me as not having properly separated the networks.
Ultimately, I would like to have:
My router
2 x SG3210 switches (called SG3210 A and SG3210 B)
1 x WA801ND Access Point.
Router connects to SG3210 A (port 8)
SG3210 A connects to SG3210 B (port 1 on both)
SG3210 A connects to WA801ND (port 7)
The users connected to the WA801ND cannot talk to any of the PCs connected to the switches.
I then read forum posts saying I shouldn't be using General, and should use Access instead, but this doesn't work either.
Totally baffled and getting increasingly so! Could I even use the WA801ND to solve this more easily?
Any thoughts welcome!