Business Community > WiFi > EAP110-Outdoor VLAN Problem
< WiFi

EAP110-Outdoor VLAN Problem

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

EAP110-Outdoor VLAN Problem

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
EAP110-Outdoor VLAN Problem
EAP110-Outdoor VLAN Problem
2017-07-25 18:29:48
Model : EAP110-Outdoor

Hardware Version : V1

Firmware Version : V1_161109

ISP :

Hi @All,

I have a problem with the AP EAP110-Outdoor.

AP is in standalone mode.
AP provide two SSID’s, one for Internal with VLAN ID:1 and one for Guest with VLAN ID:100.
AP is connected to switch on a port who has tagged to both VLAN ID’s. PVID was set to VLAN ID:1
Webserver e.g management IP is in internal address range. AP’s Management VLAN ID is set to 1.
If I connect wireless to AP-SSID Guest, I get an IP from DHCP in Guest range.
A network scan shows only the router.
If I change the wireless client IP manually in network settings to the area of the internal IP range, I find on a scan the AP’s webserver and can access to him.
This is not normal, or I understand the function of “Management-Vlan” not correctly.
Could someone reproduce my observation ?

Regards
Doppelhelix
  0      
 
  0      
 
#1
Options
3 Reply
Re:EAP110-Outdoor VLAN Problem
2017-07-28 05:12:56

Doppelhelix wrote


If I connect wireless to AP-SSID Guest, I get an IP from DHCP in Guest range.
A network scan shows only the router.
If I change the wireless client IP manually in network settings to the area of the internal IP range, I find on a scan the AP’s webserver and can access to him.
This is not normal, or I understand the function of “Management-Vlan” not correctly.


Not sure how you do the scan exactly, but with my three VLANs (guest, internal and mgmt VLAN) and firewall rules to isolate those subnets from each other it works as expected, e.g. access to the web UI of the EAP is restricted to the mgmt VLAN, no matter wether I try to reach the web UI using wireless connection to any of the two others SSIDs or even through a wired connection in any other VLAN on the router directly.

It's important here to isolate the guest network against the internal/mgmt subnets on the router, else it will route packets destined for the internal/mgmt subnet to the devices connected in this VLAN if the router is used as the default gateway, too.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  1  
  1  
#2
Options
Re:EAP110-Outdoor VLAN Problem
2017-08-03 19:55:24
Dear Members,

For now, the management VLAN function of EAP doesn't take effect on its wireless side, while only take effect on the wired side.
So the phenomenon you see is exactly how it does. All the wireless clients which are in a same subnet as EAP will be able to access the AP.
Please kindly be noted about this and thanks for your sharing.
  0  
  0  
#3
Options
Re:EAP110-Outdoor VLAN Problem
2021-03-02 20:59:31
Use ACLs because you Router will spread your pornstream on all Vlans :)
  0  
  0  
#4
Options

Information

Helpful: 0

Views: 2436

Replies: 3

Related Articles
Mixed EAP AP setup -> DHCP not working on EAP225
9453 0
VLAN Problems EAP225-Outdoor
2729 0
About Us
Press
Copyright © TP-Link Corporation Limited. All rights reserved.