Newbie Help! ER605 Standalone, Multi-Vlans, SG1005P Unmanaged Switch, & EAP225
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
I tried to research and configure it on my own, but I'm getting frustrated. I wanted to update my firmware, but the upload was stuck on 0% forever. So, I nixed that idea. I had to factory reset my router cause for whatever reason, it wouldn't log in with the admin/pword I had set up months ago. I don't even know if had setup my vlans correctly last time, but now I completely forgot what I followed to configure the 1st time.
Anyway, Here are my details:
Verizon Fios 100mbp plan, 1 Fios Modem.
ER605 Router
SG1005G Unmanaged Switch (have for extra ports for things I need to connect via Ethernet cable)
EAP225
Home Network Goal:
192.168.0.1 - vlan 1 (already set) living rm tv Ethernet wired (lg tv always drops WiFi, so needs to be wired)
Created 192.168.1.1 - vlan 10 for guests (have smart plugs, Google home, WiFi security cameras, misc devices)
Created 192.168.2.1 - vlan 20 for business (computer, iPad, office supply devices)
Have DCHP set automatic and I get IP and Gateway connection via default 192.168.0.1
Like to share 1 laser printer for both vlan 10 and vlan20.
Issues:
vlan 10 and vlan 20 not assigning to newly created IP addresses.
Created 3 ssids (wpa2) in EAP225 so that each vlan network could have it's own wifi name, but I'm confused on what's supposed to be tag/untagged in ER605 GUI, the ports to assign for each vlan, which ssids to assign to a vlan.
I tried the diagnostics test in ER605 gui and can't ping 8.8.8.8 for vlans or LAN, just WAN. I get a timed out/packets lost connection.
Is it possible to have vlan 10 and vlan 20 not talk to each other? Or, would that not work if I'm trying to share the same printer on both vlans? I haven't set anything under ACL yet.
Attached screenshots. I've also already tried this tutorial, but I don't think it's working for me. Right now devices all on vlan 1 client IP. I guess I'm trying to have an internal network that isn't accessed by the public? Idk if I'm understanding the terms clearly.
I appreciate the help!
On the ER605, the port connects to your EAP should have VLAN10/20/30 all tagged; PVID is not important when this port is tagged. (but if this port is used to connect a common PC, not EAP, then you need to use Untag and give it PVID)
However on yoru wireless SSID settings I can't see VLAN ID settings? You need to enable VLAN for all your SSIDs and give them correct VLAN ID.
@Somnus Thank you so much for your help! I think I have it set correctly now.
So in EAP225 GUI I have the SSID VLAN IDs set like this: I had to do a reset because I tried putting the SSID on VLAN 1 (which is the untagged 2/3/4/5 in ER605). So then I couldn't access the GUI, so I did a reset and left that SSID on vlan1 to VLAN ID zero to regain access.
Now all my SSID are connected to the internet with their correct network IP address. Should I configure anything else within ER605? Do I have to use ACL? Or, is ACL just to stop vlan10 and vlan20 from communicating with each other? If I do set the ACL would that mean having my laser printer shared between vlan10/20 wouldn't work?
