NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

DonD's avatar
DonD
Guide
Jan 13, 2016
Solved

Guest WiFi connection can't access Internet using WN203 access point and GS108E in VLAN config

I'm new to VLAN technology, and am beginning to wish I never heard of it.  I'm try to setup a Guest SSID and main network users SSID, such that Guests can't access main network resources.

 

Here's the setup:

 

WN203 access point:

- Main network SSID setup with security and assigned to VLAN 1

- Guest profile SSID setup without security and assigned to VLAN 2

 

GS108E swtich:

- port 1:  main network computer, no VLAN capability

- port 2:  another main network computer, no VLAN capability

- port 3:  WN203 access point

- port 8:  Router, no VLAN capability

- VLAN 1 membership:  ports 1, 2, 3, 8

- VLAN 2 membership:  ports 3, 8

 

The Problem:

Guest WiFi connection won't connect to Internet (bad!) and don't see network resources (good!).  Main network WiFi connection connects to Internet and can see all network resources.

 

Sure could use some help with this.

 

Thanks in advance,

Don

 

  • Okay, got it!  I think I finally understand how VLAN configuration works.  The example on that link really helped!   I just ordered a Netgear FVS318N.  I put one of those in a previous church, and now will put one in my current church.

     

    Thanks again for you help!

     

    Don

     

14 Replies

  • JohnRo's avatar
    JohnRo
    NETGEAR Employee Retired

    Hello DonD, 

     

    Welcome to the community! 

     

    For you to achieve the setup you wanted you'll need a router with VLAN capabilities, this will let your control routing and also can give you another set of IP addresses for the guest network. The GS108E does not have DHCP and routing capabilities since it is only a Layer 2 switch. 

     

    I hope this information helps, let us know if you have more questions. 

     

    Thanks, 

    • DonD's avatar
      DonD
      Guide

      Thanks, JohnRo for your reply.

       

      Is it necessary for the main network computers and Guest connected computers to have VLAN capabilities also?

       

      Also, could I have chosen a different switch that would solve this problem and still use the same router?

       

      Don

      • JohnRo's avatar
        JohnRo
        NETGEAR Employee Retired

        Hi DonD, 

         

        Most of the computers these days are already VLAN unaware so there's no need to worry much about the devices connecting. Yes, you have that option as well but Layer 3 switches are a bit expensive (could be more expensive than a VLAN router). 

         

        Also, here's an example of creating multiple VLAN configuration that you may use as a guide. 

         

        Thanks, 

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More