AX3000 / WA-3001 Multi SSiD mode SSID isolation

AX3000 / WA-3001 Multi SSiD mode SSID isolation

AX3000 / WA-3001 Multi SSiD mode SSID isolation
AX3000 / WA-3001 Multi SSiD mode SSID isolation
2024-01-10 03:14:39 - last edited 2024-01-11 00:55:31

TP Link, does the AX3000 / WA-3001 Access Point  automatically isolate SSIDs when in Multi SSID Mode? Is there any way to turn this off? I am not able to communicate between VLANS assigned to different SSIDs and I would like to be able to so I can handle the access at the Firewall.

  1      
  1      
#1
Options
6 Reply
Re:AX3000 / WA-3001 Multi SSiD mode SSID isolation
2024-01-10 07:52:01 - last edited 2024-01-11 00:55:31

  @Mark_JE 

 

If your router/firewall supports VLANs then you should be able to handle the access at its level:

 

52740facd8ad468d865688db6ec9919d

 

On the other hand you can change the SSIDs VLAN setting by clicking the edit button in Wireless=>Wireless settings:

 

ce460370b6ed46f2b2065c41b046848e

 

and set them the same if you want to.

 

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
  0  
  0  
#2
Options
Re:AX3000 / WA-3001 Multi SSiD mode SSID isolation
2024-01-11 02:38:17

  @terziyski  Thanks for the reply! My Firewall/Router does handle VLANS and the default is allow all traffic between VLANS per the manufacturer. I have them mapped in the AP as you noted, one VLAN for each SSID to provide segmentation. For example, I have VLAN 11 configured to SSID NAM_Main and my phone connected with the IP of 192.168.11.135 and a VLAN 88 configured to SSID NAM_IoT with the IP of 192.168.88.126 but I cannot connect to the Chromecast. If I connect the phone to NAM_IoT, I can connect to the Chromecast! This is why I am asking about SSID isolation.  Below is a network diagram. 

f7aa01b7626d48c9ac02524210a7aa14

  0  
  0  
#3
Options
Re:AX3000 / WA-3001 Multi SSiD mode SSID isolation
2024-01-11 09:02:22

  @Mark_JE 

 

I really can't say how this is implemented in the TL-WA3001 FW. Probably a TP-Link representative should elaborate on this one.

I noticed one port label in your network diagram though:

 

e6f60ce301974695837b0beb423a2794

 

According to your TL-SG108E configuration this should be Port 5 if I am not mistaken.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
  0  
  0  
#4
Options
Re:AX3000 / WA-3001 Multi SSiD mode SSID isolation
2024-01-11 22:38:01

  @terziyski thanks, other than that do you see anything else in my VLAN configuration that would cause me to be unable to communicate between VLANS assigned to different SSIDs?

  0  
  0  
#5
Options
Re:AX3000 / WA-3001 Multi SSiD mode SSID isolation
2024-01-11 23:15:57 - last edited 2024-01-12 09:40:56

  @Mark_JE 

 

Other than mentioned I din't see anything unusual - you can have a look at this example for configuring a TL-SG108E.

But after all, inter-VLAN communication depends on your Firewalla Purple configuration.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
  0  
  0  
#6
Options
Re:AX3000 / WA-3001 Multi SSiD mode SSID isolation
2024-01-19 02:56:51

  @terziyski 

 

 Just posting to help others.

  • The TP-Link TL-WA3001 appears to isolate SSIDs connected to VLANS, it basically treats all the SSIDs like guest SSIDs, while there is no documentation on this, I feel like TP-Link support should know this is how it operates.
  • I purchased a TP-Link EAP245 and did the exact same configuration as I did on the WA3001 and all the SSIDs can communicate now.

 

Will be returning the TL-WA3001...

  2  
  2  
#7
Options

Information

Helpful: 1

Views: 293

Replies: 6

Related Articles