NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Thanatos889's avatar
Thanatos889
Aspirant
Aug 23, 2017

VLAN Configuration between Netgear and Unifi

I am reaching out in the hope that somebody can assist me with this.


Trying to get more coverage in our existing office block by allowing devices to roam om diffrent AP's in the office but still only connect on their allowed LAN

Unifi Controller sits on 10.0.2.222/20 Network1

Network1: We call it Auto
10.0.1.0/20
Own GW/FW (Internet)
3x Unifi AP AC Pro
1x Unifi Outdoor+
3 x Netgear managable switches
5 Vlans ( 4/5 only on switch 2 at the moment) all ap's will plug into this switch
1 Default
2 Auto VoiP
3 Auto-Video
4 Wifi-Auto
5 Wifi-Prop
2xSSID (LSA and LS-Guest)

Network2: We call it PROP
Own GW/FW (Internet)
192.168.1.0/24
NPS for Auth (192.168.1.1x)
Has own SSID (LSP)
3x Unifi AP AC Pro

The idea is to add all the AP's to Network1 and allow the guys sitting on Network2 to connect to their own network
while the guys on Network1 are still only connected on their side. (the two networks should not see each other) , I need some help with somebody on here
to get the vlan's right as i am struggeling at the moment with my limited vlan knowledge.

 

 

Regards

9 Replies

  • Hey,

     

    Let me try and simplify this a bit. Some of the info you give is hard to fully follow :)

     

    So, you have 3 SSIDs currently?
    - "LSA" and "LS-Guest" SSIDs broadcasting on AP no. 1?
    - "LSP" SSID broadcasting on AP no. 2?

     

    Is that the setup?

     

    You then want both APs to broadcast all SSIDs, to better "extend" the coverage? However, you still want to separate the traffic so you are considering VLANs - which is the correct thing to do. Do you have any VLANs setup already? If so, which SSIDs are associated with which VLAN IDs?

     

    Cheers

    • Thanatos889's avatar
      Thanatos889
      Aspirant

      Hi

       

      So you basicaly got it right but instead of just 2 x AP's i have in total 7

       

      4 AP's broadcasting (LSA and LS Guest) Connected to its own lan with internet/dhcp/firewall etc

      3 AP's broadcasting (LSP) -- Connected to their own lan with own internet/dhcp/firewall etc

       

      The idea is to add to 3 AP's on the LSP network to my Netgear GS749T switch and then add vlan's to my switch to make them be able to still connect to service on their side ( the 3 ap's on the LSP side use NPS to connect)

       

      Currently i just have the default vlans on the switch plus the two i created called vlan 4 (Auto Vlan - LSA/LS Guest) and vlan 5 (Prop Vlan - LSP) , but i dont know if the vlan's are correct , because i admit when it comes to vlans i somehow alway struggle.

       

       

       

       

       

      • Hopchen's avatar
        Hopchen
        Prodigy

        Hi again,

         

        This makes more sense :)

         

        So, let's say we have Building A and Building B.

         

        Building A:
        4 AP's broadcasting (LSA and LS Guest). Connected to its own lan with internet/dhcp/firewall etc

         

        Building B:
        3 AP's broadcasting (LSP) -- Connected to their own lan with own internet/dhcp/firewall etc

         

        You want to deploy 3 (NEW) APs in Building A, but broadcasting the LSP SSID. Those clients connecting to the LSP network still needs DHCP, Internet, etc from Building B. So, yes VLANs would help you here. Do you have VLANs aready setup anywhere in your network (in either "building")? It does not sounds like it?

  • Sorry don't understand the problem.

    You must add all the AP in VLAN 1, that because Unifi AP need to communicate  on VLAN1 whit the Controller.

    Then, you have to set VLAN by SSID.

    Ex:

    SSID1: VLAN 10 LSA
    SSID2: VLAN 11 LSA-Guest
    SSID3: VLAN 12 LSP

    • Hopchen's avatar
      Hopchen
      Prodigy

      Redento

       

      I think that the two server rooms/networks must be separated? I am not 100 % sure - which is why I asked him. If that is the case, then he will need some VLAN seperation. The controller could easily be cloud based, who knows :)

       

      But if all APs are controlled by the same LAN controller and layer 2 separation is not strictly necessary, then yes, you are right - leave the VLAN situation alone.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More