nickel78 wrote

I attempted to reply earlier but its not showing up, so i'll post again and hope it doesn't show up twice.

The setup is simple because I am trying to preconfigure the router for a customer of mine. I have two computers plugged into ports 4 and 5. I am trying to setup a vlan so one of the ports is separated from the main network. He is trying to setup guest wifi in his establishment and wants the WAP on a seperate ip range so guests cannot get into his network. I was under the assumption that creating a vlan on one of the ports would make the router assign a different ip range to whatever is connected to it. Is that not right? So what we are trying to do is have the main network have an ip range of 192.168.0.0 and the vlan give out something like 192.168.1.0.

Mr.J wrote

Hey dude,
have you ever try ping the PC connected to port 5 with the PC connected to the port4? The function of VLAN in ER604W is just can insulate the port physically. The devices in different VLANs still get IP from the same DHCP Server, so they are still have IPs from same subnet.

R1D2 wrote

To use separate VLANs with TL-ER-type routers you have to use either a VLAN-capable switch or at least WiFi APs which have an own DHCP server:
http://forum.tp-link.com/showthread.php?95603-VLAN-not-working&p=199103&viewfull=1#post199103

This app note may help you to understand better how to achieve Multi-SSID VLANs with a TL-ER-type router and APs (just ignore the "authentication" part for the EAPs, but the principle of its VLAN setup is the same as with your goal): http://www.tp-link.com.au/faq-1002.html

R1D2 wrote

No need to excuse; that's what the forum is for: to share knowledge. Having read the manual of TL-ER604W it speaks about creating different VLANs for different broadcast domains. However, for different broadcast domains different subnets need to be defined on the router (LAN1, LAN2, LAN3 and so on). In their application example they demonstrate how to set up different VLANs and broadcast domains with the help of a VLAN-capable switch. So this makes me think that the VLAN ports are trunk ports carrying a VLAN tag. Unfortunately I don't have a TL-ER at hand for a test - still on my wish list :) -, but it only makes sense for me if the connection between the VLAN-capable switch in the manual's example uses a single physical connection to the TL-ER. Conclusion is that the TL-ER ports must be (tagged) trunk ports. The manual's example then makes perfect sense.