EAP225-Wall VLAN

EAP225-Wall VLAN
EAP225-Wall VLAN
2019-08-14 18:31:52
Model: EAP225-Wall
Hardware Version: V2
Firmware Version: 1.2.0 Build 20190222 Rel. 34350(4555)

Hello,

 

is there any chance to configure the eth ports (1-3) to specific VLANs (like SSID-to-VLAN) for an EAP225-Wall?

 

If I had root access, I would configure it by myself via SSH, but unfortunately "vconfig: ioctl error for add: Operation not permitted" and I really have no time investiagting a "custom firmware" (even though I am very interested in that approach).

 

If this is not possible at all, why there are 3 NICs just bridged directly into my "eth0-vlan-trunk"?!

 

Kind regards

0
0
#1
Options
11 Replies
Re:EAP225-Wall VLAN
2019-08-15 00:38:42

Hi,

 

The EAP225-Wall has four ports, one uplink port and three downlink ports. For these three downlink ports, one is used for PoE out, the other two are common ethernet port. 

We cannot set them as VLAN. 

0
0
#2
Options
Re:Re:EAP225-Wall VLAN
2019-08-15 10:31:50

forrest wrote

The EAP225-Wall has four ports, one uplink port and three downlink ports.

 

Sure, I have one right here in front of me.

 

forrest wrote

For these three downlink ports, one is used for PoE out 

 

That is obvious but thank you for pointing out.

 

forrest wrote

the other two are common ethernet port. 

We cannot set them as VLAN. 

 

Here we are.

 

Are there any plans to restrict the 3 NICs to a specific VLAN?

 

It is some kind of a security threat, expsing VLAN-Trunk ports directly to "customers", as this device is designed to be placed in hotel rooms.

0
0
#3
Options
Re:Re:Re:EAP225-Wall VLAN
2019-08-16 01:44:23

MrGeek wrote

Are there any plans to restrict the 3 NICs to a specific VLAN?

It is some kind of a security threat, expsing VLAN-Trunk ports directly to "customers", as this device is designed to be placed in hotel rooms.

 

Hello, 

 

When the clients connect to the EAP225-Wall via the downlink port, these clients will not show up in the Controller. That is to say, we cannot set some configuration for the wired clients on the Omada Controller. So we cannot restrict the 3 NICs to a specific VLAN.

0
0
#4
Options
Re:Re:Re:Re:EAP225-Wall VLAN
2019-08-16 06:18:12

 

You have done it on EAP245v3 whay not EAP225-Wall?

 

0
0
#5
Options
Re:Re:Re:Re:EAP225-Wall VLAN
2019-08-16 10:38:12 - last edited 2019-08-16 10:50:30

forrest wrote

When the clients connect to the EAP225-Wall via the downlink port, these clients will not show up in the Controller.

 

 

I can not confirm this statement.

 

The Web-Interface for the EAP225-Wall do show up / indicate the link status for either of the ports - even with link-speed and link-type (full-duplex, half-duplex).

 

As shberge pointed out it is configureable in the Web-Interface for the EAP245.

 

Accessible ethernet ports should (and in my own opinion must) not be VLAN trunk ports! Either they should be configurable as VLAN access ports or just ignore VLAN traffic at all and just serve as "dump dumb" ethernet ports (i.e. dropping any 802.11q traffic).

 

I highly recommend and wish for a firmware upgrade integrating this functionality. It need not necessarily enable configuring a specific VLAN access port for each NIC independently but at least for all-together.

 

Think about it, as this feature will may increases sellings of the EAP225-Wall. No professional will mount any of these EAP225-Wall when they do expose VLAN trunk ports ... 

0
0
#6
Options
Re:EAP225-Wall VLAN
2019-10-16 19:40:38

And while upgrading the design, upgrade the backhaul to Gigabit as well, what beancounter buttonsorter came up with the ridiculous idea of using a 100 Megabit backhaul for three 100 Megabit ports and two wireless connections, each of which already capable of flooding that 100 Megabit backhaul on its own?

0
0
#7
Options
Re:EAP225-Wall VLAN
2019-10-16 20:25:17 - last edited 2019-10-16 20:26:17

 

apveening wrote

And while upgrading the design, upgrade the backhaul to Gigabit as well, what beancounter buttonsorter came up with the ridiculous idea of using a 100 Megabit backhaul for three 100 Megabit ports and two wireless connections, each of which already capable of flooding that 100 Megabit backhaul on its own?

 

Given the fact that wall plate EAPs are designed as APs for every single room in medium and big hotels (100+ rooms) and the APs have a very low WiFi coverage to avoid interferences between the rooms, 100 x 100 Mbps interfaces already need a core net / Internet bandwidth of 10 Gbps to make use of a fully saturated 100 Mbps bandwidth per EAP.

 

For example, in our largest hotel installations with plenty of floors and rooms we even rate limit all EAPs to 50 to 100 Mbps per floor in the switches despite the EAPs have a Gbps interface to avoid overloading the network.

 

Now you may ask why the EAP225-Wall has AC 1200 WiFi speed, right? Because of AirTime savings if there a dozens of wall APs around nearby rooms.

 

Of course, if you just use one or two wall plate EAPs in your house, you probably want a faster NIC. But why not use an EAP225 then?

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
0
0
#8
Options
Re:EAP225-Wall VLAN
2019-10-16 20:42:16

@R1D2 

R1D2 wrote 

Of course, if you just use one or two wall plate EAPs in your house, you probably want a faster NIC. But why not use an EAP225 then?

Because of the physical size and shape of the EAP225-Wall. It fits exactly in a good and easy to reach spot where nobody notices it. 

0
0
#9
Options
Re:EAP225-Wall VLAN
2019-10-16 20:56:12

apveening wrote

Because of the physical size and shape of the EAP225-Wall. It fits exactly in a good and easy to reach spot where nobody notices it. 

 

I see. But if I were to use a 10 ton truck for shopping because more shopping bags fit in there, I wouldn't call the mechanical engineers "beancounter buttonsorter", because there are only 2 seats in the truck. laugh

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
0
0
#10
Options
Re:EAP225-Wall VLAN
2019-10-16 21:17:54 - last edited 2019-10-16 21:26:53

@R1D2 

But what is the difference in price of the finished product?

 

I am seriously considering replacing it with a comparable Ubiquity product which does have Gigabit backhaul, nearly the same dimensions (about 0.1 mm less in the most critical one) and an extra RJ45 port.

0
0
#11
Options