NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

jasonh77tw's avatar
jasonh77tw
Aspirant
Oct 22, 2023

How to setup VLAN on GS510TPP + WAX620

I have two routers, one is for office users and the other is for guests. I just got my new GS510TPP with WAX620 *4 and I want to connect these routers and APs to GS510TPP.

In order to share the APs with office users and guests while isolate them in different network, I tried to arrange different VLAN and SSID settings on GS510TPP and WAX620 (via Insight Cloud) but with no success.

It would be great if someone can help me 🙂

 

Jason Huang 

3 Replies

  • schumaku's avatar
    schumaku
    Guru - Experienced User

    Start from the config with the primary router dealing with the primary LAN as the default VLAN (VLAN 1) allowing the GS110TPP and all WAX620 admin.

     

    Add one VLAN for this guest network, for example VLAN 200.

     

    Define one additional port as an access port for the additional, new guest LAN router (say VLAN 200, [U]ntagged, PVID 100).

     

    Add the four ports connecting the WAX620 to the VLAN 200 [T]agged.

     

    Define the Guest VLAN SSID on all the WAX620' to work on the VLAN 200.

     

    Connect the GS110TPP access port configured for the VLAN 200 to the second router LAN. 

     

    Chime back if this simple guide is not sufficient 8-)

     

    Are you using Negear Insight for this, or are you managing the switch and WAX manually / locally?

     

    Happy weekend!

    • jasonh77tw's avatar
      jasonh77tw
      Aspirant

      Hi schumaku

       

      Thanks for your advice, I configured the switch like this and it works.

      I can access different internet connection through different SSID now, but I'm wondering that is it really safe? I mean are devices using SSID A/VLAN1 really isolated from devices using SSID 2/VLAN2?

      Thanks again.

       

       

      • schumaku's avatar
        schumaku
        Guru - Experienced User

        Have to guess...

         

        g8 is connecting to the router 2 making the VLAN 2, it's IP subnet, and the matching Internet access available?

        g1 is connecting to the router 2 making the VLAN 1, it's IP subnet, and the matching Internet access available?

         

        The two SSIDs are assigned to the VLAN 1 (intentionally both untagged and tagged?) and VLAN 2 (tagged), the AP (or the APs) are connecting to g2...g7.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More