How to Configure Bridge VLAN(MDUs) for Apartment or Hotel Scenarios

How to Configure Bridge VLAN(MDUs) for Apartment or Hotel Scenarios

How to Configure Bridge VLAN(MDUs) for Apartment or Hotel Scenarios
How to Configure Bridge VLAN(MDUs) for Apartment or Hotel Scenarios
2024-01-10 06:09:31 - last edited 2024-01-31 01:20:53

Background:

 

This post provides a configuration guide to bridge VLAN on the router to meet the requirements of the apartment or hotel room network design.

If you don't know what this bridge VLAN is for, please read this article. Enterprise Wi-Fi Solutions for MDUs | TP-Link Omada Pro

 

This Article Applies to:

 

All routers with multiple VLANs are supported.

 

Application Scenario:

 

 

Configuration Steps:

 

1. Select your Organization and choose your Site.

2. Go to Settings > Wired Networks > LAN.

3. Create a new VLAN interface. Set the VLAN Type as Multiple and specify the VLAN ID. Set other parameters according to your needs. Click Create.

 

In this setup, the AP is connected to the WAN/LAN5. PC is on WAN/LAN6. Yet the computer would not get an IP from the VLAN.

 

 

4. Then go to Wireless Networks > WLAN > Create New Wireless Network. Set up the parameters accordingly and click Create. Note that Guest Network is not enabled.

 

 

 

5. Because the multiple VLAN itself blocks the access between the VLAN range you set but it is not blocking the core network(LAN). We need to set up extra ACL rules to block access from the Room VLAN to the core network(LAN).

Go to Network Security > ACL > Gateway ACL > Create New Rule.

 

 

6. The setup is complete.

 

Verification:

 

Goal:

  • VLAN between the room SSID is isolated.
  • The core network(LAN) cannot be accessed.

 

1. Read the IP from the controller.

SSID = Room1001 IP = 10.0.0.2;

SSID = Room1002 IP = 10.0.0.3.

 

 

2. Test the isolation between the networks.

 

 

3. WIFIman and Wi-Fi Toolkit from TP-Link.

 

 

4. Test the core network cannot be accessed.

 

 

Note:

 

1. We recommend you set up 20 VLANs in 1 VLAN interface. If it exceeds this, you may experience some performance when the controller sends the config to the router.

2. If you want to set up the switch, you should do it from the Profile. If you have trouble with this part, please read the User Guide of the Omada Controller.

 

Example: This screenshot demonstrates the process of creating a new profile to include VLAN1001 to 1020. By assigning this profile to a switch port, that specific port will only receive traffic from VLAN1001 to VLAN1020. The default ALL profile will not be used on this switch port.

 

 

 

Update Log:

 

Jan 11th, 2024:

Update the format.

 

Recommended Threads:

 

Configuration Guide How to Configure WireGuard VPN on Omada Controller

Get the Latest Firmware Releases for Omada Routers Here - Subscribe for Updates

Get the Latest Omada SDN Controller Releases Here - Subscribe for Updates

 

Feedback:

 

  • If this was helpful, welcome to give us Kudos by clicking the upward triangle below.
  • If there is anything unclear in this solution post, please feel free to comment below.

 

Thank you in advance for your valuable feedback!

 

------------------------------------------------------------------------------------------------

Have other off-topic issues to report? 

Welcome to > Start a New Thread < and elaborate on the issue for assistance.

 

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  5      
  5      
#1
Options
2 Reply
Re:How to Configure Bridge VLAN(MDUs) for Apartment or Hotel Scenarios
2024-05-19 12:30:23

  @Clive_A It's quite conveinient to create multiple VLAN on the same physical interface. But why use the same DHCP pool for all these VLAN? Can I use different DHCP pool for different VLAN? I think it's not very practical to use one DHCP pool/Subnet for different VLAN either. Firstly, not easy for management. Secondly, the IP address may not be enough. On this example, there are only 254 IP address shared by 20 VLAN/SSID, I think for most scenarios, it's not enough.

  1  
  1  
#2
Options
Re:How to Configure Bridge VLAN(MDUs) for Apartment or Hotel Scenarios
2024-05-20 01:02:50 - last edited 2024-05-20 01:04:22

Hi @TOHanks 

Thanks for posting in our business forum.

TOHanks wrote

  @Clive_A It's quite conveinient to create multiple VLAN on the same physical interface. But why use the same DHCP pool for all these VLAN? Can I use different DHCP pool for different VLAN? I think it's not very practical to use one DHCP pool/Subnet for different VLAN either. Firstly, not easy for management. Secondly, the IP address may not be enough. On this example, there are only 254 IP address shared by 20 VLAN/SSID, I think for most scenarios, it's not enough.

You can create multiple VLAN interfaces manually for different purposes.

If you are setting this up for an apartment, I think placing your guests into the same subnet would not hurt anything. If you are setting up for the home, usually, less than 5 or 10 VLAN interfaces would suffice.

If you have a hotel and you'd like to specify the networks a little more, you can set up one VLAN interface for a floor. IMO, I don't see any reason why you would set up one VLAN interface for one room. If you have 100 rooms, you need to create 100 subnets. 

This will also increase the CPU usage and load up the traffic overall. And if you set up ACL, you are gonna create 100 ACLs or maybe 200 for bi-directional.

 

And, this is a common way we have investigated and developed to set up the VLAN int for condos.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  1  
  1  
#3
Options

Information

Helpful: 5

Views: 915

Replies: 2

Related Articles