Omada setting up Vlan just forone or two EAP's - not direct from the switch port, so in a chain.

Omada setting up Vlan just forone or two EAP's - not direct from the switch port, so in a chain.

Omada setting up Vlan just forone or two EAP's - not direct from the switch port, so in a chain.
Omada setting up Vlan just forone or two EAP's - not direct from the switch port, so in a chain.
2025-07-16 13:46:22

Hi,

 

Very new to VLAN, lots of other networking but not this, watched a few videos but struggling, is this possible?

 

Main LAN 192.168.2.1 to 192.168.3.255 (254 subnet) with lots of EAP225's & other all run by local omada from a PC.

 

As shown I cannot isolate the Vlan to a single port from the switch, TL-SG3428X v1.0

Most of the devices I need coming along that main cable I need access to, there are 40m of cat6 between so cannot run another cable.

 

Can I set up the Guest EAP225 & anything that connects to it, WiFi or a switch plugged into, working as a separate network, that cannot see the MAIN LAN but can see other devices on that Guest AP. I know I can wifi guest but that's not the same I don't think devices can see one another.

 

Thanks I/A

 

 

  0      
  0      
#1
Options
3 Reply
Re:Omada setting up Vlan just forone or two EAP's - not direct from the switch port, so in a chain.
2025-07-16 16:38:05 - last edited 2025-07-16 16:55:04

  @Bignose21 

 

It is possible to configure the Guest EAP225 to be on a separate VLAN.  In your case, the non Tp-Link switch in your diagram must be a VLAN capable switch.  The main cable between the two switches then becomes a trunk connection with the main LAN (perhaps "untagged") and guest VLAN (with a VLAN ID).  Your diagram does not show a gateway (router) which is needed to route the VLANs through the modem.  The Tp-Link switch in the diagram can not do this.  It can only forward the main LAN or the guest VLAN (but not both) to the modem if the modem is not VLAN capable and can handle trunk connections.  If the modem is VLAN capable, then everything should work if configured properly.

 

 

 

1x ER706W 1x OC300 4x SG2008 1x EAP610 2x EAP650
  0  
  0  
#2
Options
Re:Omada setting up Vlan just forone or two EAP's - not direct from the switch port, so in a chain.
2025-07-17 02:01:12

  @Bignose21 

Switch can share a single VLAN or multiple VLANs. As for the non-TP switch, if it does not support VLAN, it can still do it. Trunk usually can be forwarded. It's just you have to be careful with the VLAN config on the AP. 

How to Configure VLAN on TP-Link Switch

Common Questions About 802.1Q VLAN

  0  
  0  
#3
Options
Re:Omada setting up Vlan just forone or two EAP's - not direct from the switch port, so in a chain.
2025-07-17 08:46:36

  @Bignose21 

 

Many thanks for your replies.

 

I think this may get very tricky indeed.

 

I have a niche ISP in the UK AAISP (Andrews & Arnold).

I have a 2 lines bonded (FTTC) so they have their own router & firmware, called Firebrick.

Seems to be an excellent kit & can probably do anything & everything as they seem very specialist.

 

I have 2 different modems feeding the FB, a Zyxtel (forget which model) & TP-link Archer VR600 v2

 

I think for the time being I will just try to use normal guest wifi.

The only thing is I assume someone could plug ethernet into the EAP225 & that will have access to the network, unless that can be disabled.

 

Thanks again.

  0  
  0  
#4
Options