Pfsense / SG3428XPP-M2 / EAP670

Pfsense / SG3428XPP-M2 / EAP670

Pfsense / SG3428XPP-M2 / EAP670
Pfsense / SG3428XPP-M2 / EAP670
2024-11-19 17:54:14
Model: TL-SG3428XPP-M2  
Hardware Version: V2
Firmware Version: 1.20.1 Build 20231221 Rel.84343

Hi, I replaced my cisco switch and ubiquity AP for tp-link SG3428XPP-M2 and EAP670.

 

Original setup, pfsense Router, Vlan, Firewall) uplink to Cisco and AP connected to Cisco. everything working including Vlans on switch ports and on the AP.

 

Now, pfsense with no changes and uplink to SG3428XPP-M2 after configuration i can access all Vlans the same way for my PC's no issues but i cant get Internet when I connect to EAP670. I created 2 SSID in different Vlans and i get connected no internet. 

 

Since nothing changed on my pfsense i dont beleive the issue is there,  can anyone shed some pointers on where would something not be configured properly?

 

Thank you

  0      
  0      
#1
Options
5 Reply
Re:Pfsense / SG3428XPP-M2 / EAP670
2024-11-20 01:55:06

Hi @Ph0enix_75 

Thanks for posting in our business forum.
If they don't get an IP address, and you are certain that you have put the VLAN ID in the SSID, that's a VLAN tag issue on the ports(switch).

Double-check that part.

Common Questions About 802.1Q VLAN

How to Configure VLAN on TP-Link Switch

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#2
Options
Re:Pfsense / SG3428XPP-M2 / EAP670
2024-11-20 03:22:14

  @Clive_A 

 

Hi and thank you for your reply, here is the way it's configured at moment and maybe you can point my mistake so i can read more on it. Most of what i read always points to solutions using a controller that i do not have. I don't mind buying one but i believe it can be configured without one? Thank you for your patience i am new to this.

 

all my switch port are in Vlan1 (system-vlan 172.25.25.X) except the physical ports that are on other Vlans for PC'S The SG3428 and the EAP are in the system-Vlan1 subnet (172.25.25.X)

 

1/0/28 goes to my pfsense

1/0/23 goes to my EAP

 

in the explanations i will use Vlan75 for example

 

Vlan1 untagged members

1/0/28, 1/0/23

 

Vlan75 tagged ports

1/0/28, 1/0/23

 

Vlan75 untagged ports

1/0/7

port config of 1/0/7 PVID 75

 

The computer behind 1/0/7 works as expected and receives DHCP in 192.16.75.X

 

In the EAP i created an SSID with password, enabled Vlan and put 75 in the Vlan id.

 

Hoping this gives you a better idea of what i did wrong. Thank you   

 

  0  
  0  
#3
Options
Re:Pfsense / SG3428XPP-M2 / EAP670
2024-11-20 03:49:38

Hi @Ph0enix_75 

Thanks for posting in our business forum.

Ph0enix_75 wrote

  @Clive_A 

 

Hi and thank you for your reply, here is the way it's configured at moment and maybe you can point my mistake so i can read more on it. Most of what i read always points to solutions using a controller that i do not have. I don't mind buying one but i believe it can be configured without one? Thank you for your patience i am new to this.

 

all my switch port are in Vlan1 (system-vlan 172.25.25.X) except the physical ports that are on other Vlans for PC'S The SG3428 and the EAP are in the system-Vlan1 subnet (172.25.25.X)

 

1/0/28 goes to my pfsense

1/0/23 goes to my EAP

 

in the explanations i will use Vlan75 for example

 

Vlan1 untagged members

1/0/28, 1/0/23

 

Vlan75 tagged ports

1/0/28, 1/0/23

 

Vlan75 untagged ports

1/0/7

port config of 1/0/7 PVID 75

 

The computer behind 1/0/7 works as expected and receives DHCP in 192.16.75.X

 

In the EAP i created an SSID with password, enabled Vlan and put 75 in the Vlan id.

 

Hoping this gives you a better idea of what i did wrong. Thank you   

 

Then this is the correct setup. And based on the given info, the PC can work on VLAN 75 on the switch, it should be working fine for the switch and the router.

AP, can you show a picture of how you define the SSID?

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#4
Options
Re:Pfsense / SG3428XPP-M2 / EAP670
2024-11-20 04:31:16

  @Clive_A 

I think I might have another issue also, i see the light on the EAP but no light on the switch port. If i scan for WIFI i see the 2 SSID i had created. I will have to look further into this. For the configuration of the EAP after creating the SSID i only saw a menu to select enable for Vlan and another section to put the Vlan ID and put 75. I can't show a picture since i can't connect to the web page of the EAP and can't ping it either.

  0  
  0  
#5
Options
Re:Pfsense / SG3428XPP-M2 / EAP670
2024-11-20 04:44:06

  @Clive_A 

i have just connected the EAP to a dummy L2 poe switch and it came up right away and i am able to connect to its GUI. I dont know why the SG3428 is not showing activity at all for it.

  0  
  0  
#6
Options