AX3000 / WA-3001 Multi SSiD mode SSID isolation
TP Link, does the AX3000 / WA-3001 Access Point automatically isolate SSIDs when in Multi SSID Mode? Is there any way to turn this off? I am not able to communicate between VLANS assigned to different SSIDs and I would like to be able to so I can handle the access at the Firewall.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
If your router/firewall supports VLANs then you should be able to handle the access at its level:
On the other hand you can change the SSIDs VLAN setting by clicking the edit button in Wireless=>Wireless settings:
and set them the same if you want to.
- Copy Link
- Report Inappropriate Content
@terziyski Thanks for the reply! My Firewall/Router does handle VLANS and the default is allow all traffic between VLANS per the manufacturer. I have them mapped in the AP as you noted, one VLAN for each SSID to provide segmentation. For example, I have VLAN 11 configured to SSID NAM_Main and my phone connected with the IP of 192.168.11.135 and a VLAN 88 configured to SSID NAM_IoT with the IP of 192.168.88.126 but I cannot connect to the Chromecast. If I connect the phone to NAM_IoT, I can connect to the Chromecast! This is why I am asking about SSID isolation. Below is a network diagram.
- Copy Link
- Report Inappropriate Content
I really can't say how this is implemented in the TL-WA3001 FW. Probably a TP-Link representative should elaborate on this one.
I noticed one port label in your network diagram though:
According to your TL-SG108E configuration this should be Port 5 if I am not mistaken.
- Copy Link
- Report Inappropriate Content
@terziyski thanks, other than that do you see anything else in my VLAN configuration that would cause me to be unable to communicate between VLANS assigned to different SSIDs?
- Copy Link
- Report Inappropriate Content
Other than mentioned I din't see anything unusual - you can have a look at this example for configuring a TL-SG108E.
But after all, inter-VLAN communication depends on your Firewalla Purple configuration.
- Copy Link
- Report Inappropriate Content
Just posting to help others.
- The TP-Link TL-WA3001 appears to isolate SSIDs connected to VLANS, it basically treats all the SSIDs like guest SSIDs, while there is no documentation on this, I feel like TP-Link support should know this is how it operates.
- I purchased a TP-Link EAP245 and did the exact same configuration as I did on the WA3001 and all the SSIDs can communicate now.
Will be returning the TL-WA3001...
- Copy Link
- Report Inappropriate Content
Information
Helpful: 1
Views: 990
Replies: 6
Voters 0
No one has voted for it yet.