Guest VLAN Tagging + No AP Isolation?
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi,
I am looking to replace my current mesh wifi service with something that can support the following;
1) Disabling the AP Isolation.
I have read that the Deco product doesn't allow wireless devices to connect to LAN connected devices. Can this feature be disabled? I absolutely need some of my wireless devices to connect to devices that are connected to the LAN (e.g. file server, NAS, Sonos, etc.)
2) Guest SSID with VLAN Tagging
I am looking to enable the GUEST mode on the Deco (access point) and for those devices that connect to the Guest SSID to utilise a separate IP address and be a member of a seperate VLAN. The underlying switch supports VLAN Trunking, etc. so I should be able to utilise just the one LAN connection to support 802.1Q tagging.
I haven't purchased a device as yet, but want to make sure TP-Link supports these features before purchasing.
Many thanks for any help you can provide.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi,
Does the M9 support VLAN Tagging on the nonGuest network?
I'm trying to use my Deco m9 to CenturyLink's Fiber by removing their modem, but I need VLAN Tagging turned on first. Do I just go into the VLAN Settings and enable that and give it some random ID? Then contact Centurylink GPON (fiber), call FTTH support and get my PPoE username and password?
Thanks for your help,
:) John
- Copy Link
- Report Inappropriate Content
JohnBruso wrote
Hi,
Does the M9 support VLAN Tagging on the nonGuest network?
I'm trying to use my Deco m9 to CenturyLink's Fiber by removing their modem, but I need VLAN Tagging turned on first. Do I just go into the VLAN Settings and enable that and give it some random ID? Then contact Centurylink GPON (fiber), call FTTH support and get my PPoE username and password?
Thanks for your help,
:) John
This probably should be a seperate thread, as it’s a very different problem. :-)
You are talking here about VLAN tagging on the *outside* network not either of the inside ones. CenturyLink will have a particular VLAN ID you must use. It must match theirs. The Deco has a whole load of preconfigured ISPs you can chose from (in settings - advanced - VLAN). After turning VLAN on select VLAN mode and you will get a list of providers. If CenturyLink is there just select it, otherwise choose custom and enter the ID.
BTW, I have assumed you are replacing their router, and not actually the modem/ONT.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Thanks for your quick response !
Unfortunately my configuration only works at optimal speeds with the main network at 5Ghz. I only have the guest network at 2.4Ghz because of the printer and my apple watch (that also only connects with 2.4Ghz).
Having said that, what I really need is to be able to disable AP isolation in ROUTER mode. Currently, all my devices have trouble seeing devices in the other network, even though all devices share the same router/IP range.
- Copy Link
- Report Inappropriate Content
If the VLAN tag need to be enabled to get internet, you can connect the Deco M9 plus to the existing router first to configure it to get internet as dynamic IP.
After that, you can enable VLAN and enter the VLAN ID as requested via Deco app, then you can change the network connection type to PPPoE and enter the username and password given by ISP to get internet and replace the old router.
May it help and have a nice day.
- Copy Link
- Report Inappropriate Content
The reason why the devices cannot access each other is that the main wifi network and guest network are isolated from each other in router mode.
And the AP isolation cannot be disabled due to the mesh network.
Meanwhile, for the devices who support 2.4GHz only, you can disable 5GHz first and connect them to the host 2.4GHz network and the disable the mesh technology for the specific device.
Good day.
- Copy Link
- Report Inappropriate Content
I personally require this feature too and was unpleasantly surprised that it was implemented this way. I would have expected it to be done right at this price range (Deco M9 Plus here).
I am not sure how this is currently implemented exactly in AP mode and if IPs assigned to Guest clients are able to access other IP's in the same subnet (connected to the same subnet by wire), but if this is not explicitly denied then there is a good reason to avoid using a Guest network in AP mode altogether. Otherwise guest wireless clients are able to access IP's in the same subnet which are connected via wire.
Hopefully TP-Link will implement this right in a timely manner, otherwise I will have to return the product.
In short: +1 for this feature. ;-)
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
The Deco supports VLAN in router mode only; and the guest network is isolated from home network in router mode as well.
You can refer to https://www.tp-link.com/support/faq/2399/ to get the differences between the wireless router and access point mode.
For the new feature to be added, you can keep an eye on our official website.
Good day.
- Copy Link
- Report Inappropriate Content
@Kevin_Z we all get that, we need VLAN tagging in AP mode so we can create a secure guest network. Not in router mode (we know it's there) I don't want second retour on my network, that to facilitate troubleshooting.
thank you
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 17692
Replies: 38
Voters 0
No one has voted for it yet.