Hi @Escride 

Thanks for posting in our business forum.

Hope this will be helpful in allowing you to understand how VLAN works.

Guest network is not working, seem to be the case where you set the VLAN incorrectly. If you have a diagram, this would be a lot easier.

  @Clive_A 

Thank You for the diagram, but I didn't get into it.

You're right, it is easier with a diagram, so I created one with outtopology:

So this is our actual network. No VLAN is defined yet and the LAN-Network is the one created by TP-Link (Standard), which isn't changeable.

This Network is running in 198.93.195.1/24, where 198.93.195.2 is the server and 198.93.195.253 the ER605-Router.

Both switches are "Netgear JGS524PE – 24-Port Gigabit ProSAFE Plus Switch with PoE".

The EAP are all three EAP245(EU) v3.0.

Now, we want that the EAPs create a 2nd Wireless Lan to connect some devices to the internet only. It is strictly forbidden that any device in the Office Network is accessible.

My problem is that I don't know what the Controller will setup inside so I think I do something wrong with the Netgear-Switches.

I tried to follow https://www.tp-link.com/de/support/faq/3091/ but since I dont use a TP-Link switch something is always wrong. I cannot create an Switch-ACL because I don't have a TP-Link switch, what I think is my problem, but since we got 2 manageable switches, it should work.

Any suggestions how to set it up properly for me?

Regards

Escride

Hi @Escride 

Thanks for posting in our business forum.

Escride wrote

  @Clive_A 

Thank You for the diagram, but I didn't get into it.

 

You're right, it is easier with a diagram, so I created one with outtopology:

 

So this is our actual network. No VLAN is defined yet and the LAN-Network is the one created by TP-Link (Standard), which isn't changeable.

This Network is running in 198.93.195.1/24, where 198.93.195.2 is the server and 198.93.195.253 the ER605-Router.

Both switches are "Netgear JGS524PE – 24-Port Gigabit ProSAFE Plus Switch with PoE".

The EAP are all three EAP245(EU) v3.0.

 

Now, we want that the EAPs create a 2nd Wireless Lan to connect some devices to the internet only. It is strictly forbidden that any device in the Office Network is accessible.

 

My problem is that I don't know what the Controller will setup inside so I think I do something wrong with the Netgear-Switches.

I tried to follow https://www.tp-link.com/de/support/faq/3091/ but since I dont use a TP-Link switch something is always wrong. I cannot create an Switch-ACL because I don't have a TP-Link switch, what I think is my problem, but since we got 2 manageable switches, it should work.

 

Any suggestions how to set it up properly for me?

 

Regards

 

Escride

 

Try the GW ACL instead if you don't have a TP-Link switch.

You should use VLAN and you should follow instructions from either our 802.1Q VLAN guide or your brand.

Your Router should tag all the ports when you configure the Networks > Interfaces > LAN interfaces, pick the switch port or select all. This will become a tagged port. If you have multiple VLAN interfaces, it'll become a trunk automatically.

Then set up your SW with the tag VLAN. So, this VLAN from the router will pass on to the switch. Then switch to EAP, and set up the VLAN on the switch port as well. Then set up the SSID VLAN on your EAP.

This is a brief setup guide for you. You need to set up the VLAN.

If you need help with step-by-step, you can set up the router first and then set up the switch by calling support of the switch and walk through the switch setup.

EAP SSID VLAN is under Advanced Settings in your SSID settings. Set up the VLAN correspondingly.