Business Community > Pharos Wireless Bridges > CPE 210/TL-SG108PE/EAP110
< Pharos Wireless Bridges

CPE 210/TL-SG108PE/EAP110

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

CPE 210/TL-SG108PE/EAP110

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
CPE 210/TL-SG108PE/EAP110
CPE 210/TL-SG108PE/EAP110
2020-07-19 15:18:26
Model: CPE210  
Hardware Version: V3
Firmware Version:

Good afternoon and many thanks in advance for any assistance you can give with the issues I am having configuring this particular setup.

I have attached a diagram to outline what I am trying to achieve (excuse the amateur nature of it, but it was put together rather hastily).

Currently, I am installing a network which gives both a public and private connection that must be kept isolated from each other using 2 x CPE210 for the trunk link between the two buildings, a TL-SG108PE at both ends of the link and an EAP 110 for the wireless at the client side of the link that has a private SSID and a Guest (public) access.

With the current configuration highlighted in the diagram attached, I get the following conditions

  • The Private link works perfectly with the clients picking up an IP address (192.168.1.x) from the BT router back at the main site.
  • The Public connection does not pick up an IP address (192.168.10.x) at all from the private BT router as cannot be seen across the link. Even if I enter a static address I cannot see across the CPE link.
  • When connected via a wired connection or wirelessly  to the client side switch on the private network, I can manage and log onto all the devices along the connection. When connected to a port (vlan 1) of the switch at the main site, I can only manage that particular switch and cannot see the other devices towards the client side.

The configurations of each device is as follows

TL-SG108PE (access point end)

IP Address – 192.168.1.230/24

802.1Q VLAN enabled

VLAN  1 Tagged – Port 8 (PVID 1)

VLAN  1 Untagged – 1,2,3,4,5,7

VLAN 20 Tagged – Port 8 (PVID 1)

VLAN 20 Untagged – Port 6

CPE 210 (access point side)

IP Address – 192.168.1.233/24

Set as AP and a single SSID

CPE 210 (Client side)

IP Address – 192.168.1.234/24

Set as Client and locked to the Access Point with a nice strong signal (100% with very little noise)

TL-SG108PE (Client Side)

IP Address - 192.168.1.231

VLAN 1 Tagged – Ports 7,8 (PVID 1)

VLAN 1 Untagged – Ports 1,2,3,4,5 and 6

VLAN 20 Tagged – Port 7,8 (PVID 1)

EAP 110

IP address – 192.168.1.232/24

SSID – Private (PVID 1)

SSID – Public (PVID 20)

I suspect it is something to do with PVID assignments but can only assign one PVID to each port, therefore cannot have them in both. I have also toyed with the idea that maybe it is because of using the default management VLAN to carry traffic but after three days of working on this problem, my mind is totally frazzled.

Fifteen years ago  I used to do this with Cisco equipment every day,  but I am a little rusty on it now.

Any assistance or pointers would be greatly appreciated and many thanks in advance.

P.S. Sorry for such a long post but wanted to make sure I had as much detail as possible.

 

 

 

 

 

 

  0      
 
  0      
 
#1
Options
8 Reply
Re:CPE 210/TL-SG108PE/EAP110
2020-07-19 15:23:05

@Tony_C

 

Point 2 should have said ' The Public connection does not pick up an IP address (192.168.10.x) at all from the public BT router as cannot be seen across the link. Even if I enter a static address I cannot see across the CPE link.

  0  
  0  
#2
Options
Re:CPE 210/TL-SG108PE/EAP110
2020-07-20 10:59:53 - last edited 2020-07-20 11:09:06

Tony_C, see this thread for a possible solution (you can combine the Mgmt VLAN 100 with VLAN 1 which corresponds to VLAN 20 in the linked thread). The trick is to use a Mgmt VLAN on the CPEs to force the CPE handling VLAN-tagged frames. You can also set the Mgmt VLAN of EAPs to avoid untagged frames on trunks at all, so the PVIDs of the trunk ports don't matter.

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#3
Options
Re:CPE 210/TL-SG108PE/EAP110
2020-07-20 17:31:45

@R1D2 Many thanks R1D2,

 

I did have a good read of this interesting article and the great response from yourself.

 

After reding this article, I tried to pull the private network out of the default VLAN 1 and make it VLAN 10 and set the managemnet to VLAN 10. As soon as I did this, I lost complete communication with the CPE's and EAP and no trafiic at all seemed to flow. My only option there was to factory reset the CPE's and EAP's and configure again with the private network in Vlan 1 once again. This allowed me to have management of them back and at least pass trafiic (and receive DHCP addresses) on the private network once again.

 

I am pulling my hair out with this issue at the moment because I have been to site on four seperate occasions now and spent the whole day there each time.

 

It should be a relatively easy installation, but is turning into a living nightmare.....

 

Any configuration options you could suggest I will happily have a go at implementing. I am back down at site again tomorrow to try to and resolve it.

 

Many thanks for your assistance and I will try the management move again tomorrow.

  0  
  0  
#4
Options
Re:CPE 210/TL-SG108PE/EAP110
2020-07-20 19:59:33 - last edited 2020-07-20 20:00:03

 

Tony_C wrote

After reding this article, I tried to pull the private network out of the default VLAN 1 and make it VLAN 10 and set the managemnet to VLAN 10. As soon as I did this, I lost complete communication with the CPE's and EAP and no trafiic at all seemed to flow.

 

No, leave the private network in VLAN 1 and set management VLAN to 1 (just combine private and management networks).

 

If you want to use VLAN 10 instead, you would need to change all access ports on your switch for the private network to VLAN 10 / PVID 10. Before doing so, just assign one (access) port of the switch to VLAN 10/PVID 10 and change your laptop's connection from the port in VLAN 1/PVID 1 to the port in VLAN 10/PVID 10 to have access to the CPEs.

 

I just did use other VLAN numbers b/c I don't use VLAN 1 at all and I use a separate network only for management, but you can leave all as is with your VLANs if you already use VLAN 1 for the private network. You then must set the management VLAN to 1, too, b/c the EAPs and CPEs itself (not only the WLAN for the private network) are in the private network in your config.

 

There is nothing wrong with your setup using VLAN 1.

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#5
Options
Re:CPE 210/TL-SG108PE/EAP110
2020-07-23 19:01:21

Many thanks for your assistance on this issue R1D2.

 

I am still having issues with this link. The devices in VLAN 1 sometimes cannot get a valid IP address either, therefore today I disabled 802.1Q and just run it as a private network that is totally flat within vlan 1 and did not worry about the Public network at all. Issues were still occurring.

 

The two CPE210's are only around 300 yards from each other, could this potentially be causing an issue i.e. them being too close together?

 

Many thanks in advance for any further advice.

 

Tony.

  0  
  0  
#6
Options
Re:CPE 210/TL-SG108PE/EAP110
2020-07-23 20:33:50 - last edited 2020-07-23 20:36:37

 

Tony_C wrote

The devices in VLAN 1 sometimes cannot get a valid IP address either

 

Are you sure this is caused by the directional link of the CPEs? What is the evidence you have for this? Packet loss? If so, it should appear on other occasions, too. If it is really packet loss, you can load the CPE status page and check signal quality and other parameters at the time this packet loss happens. It's difficult to say what causes packet loss w/o further investigation.

 

Common recommendations are to set the parameters correctly and – most important – align the CPE's antennas properly. Use the antenna alignment tool to adjust them. You also need a free line of sight, that means there must be no obstacles whatsoever in between the two CPEs. Use following wireless parameters:

 

  • WiFi mode: 802.11n-only,
  • Channel: either Auto or the most unused channel (check using built-in WiFi survey),
  • Channel width: 20 MHz,
  • MAXtream: disabled,
  • Distance setting: either Auto or actual distance + 0.1km.

 

If the link is still unreliable, there could be to much interferences, e.g. in a dense-populated area. Also make sure that the EAP110-OD does not interfere with the CPE210. Use different channels for both EAP and CPE. You can aslso use the built-in spectrum analyzer of the CPE210 to view channel usage at your location.

 

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#7
Options
Re:CPE 210/TL-SG108PE/EAP110
2020-07-23 20:58:01

@R1D2, many thanks once again. I am back on site next Tuesday and am going to do a spectrum analysis of all frequencies. The reason I say that is that there is a big electricity sub transformer close to the client end and I am beginning to think this could be causing massive issues.

 

90% of the time the tills and card machines work okay, but certain times everything just fails and I get a call from the holiday camp saying that all syatems are down, they are connected to the AP but are receiving no IP address. Fortunately the guy in charge is quite IT savvy and does his own analysis before calling me.

 

I am hoping to run a spectrum analysis for an hour or so and hopefully find a quiet channel and lock to it.

 

I will update you on the results next week.

 

 

Tony.

  0  
  0  
#8
Options
Re:CPE 210/TL-SG108PE/EAP110
2020-07-24 00:37:21

 

Tony_C wrote

I get a call from the holiday camp saying that all syatems are down, they are connected to the AP but are receiving no IP address. Fortunately the guy in charge is quite IT savvy and does his own analysis before calling me.

 

Tell him to set a static IP to his laptop/PC next time and to try whether the the remote CPE and the router can be pinged. If yes, the issue is caused by the DHCP server. If no, the wireless link might be down (would be the next step to test when DHCP fails).

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#9
Options

Information

Helpful: 0

Views: 978

Replies: 8

About Us
Press
Copyright © TP-Link Corporation Limited. All rights reserved.