NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

JohnMLCL's avatar
JohnMLCL
Aspirant
Feb 16, 2026

WiFi Network not passing VLAN

I am having issues with my Insight Managed WAC540 to properly connect to a VLAN.
If I send data untagged, it works perfectly fine on the default VLAN for the device, but I assign a SSID to be on a given VLAN, and it just doesn't connect to the VLAN.

I have the port setup properly at the switch, with general traffic untagged, and the specified VLAN tagged.

If I plug in another managed device, it functions as expected (it trunks).
Inside insight shows the vlan, shows the other devices that are members of the VLAN (which are all hard-wired at this point).

The cable is plugged into the primary port on the WAP.
If i do not send anything untagged, the WAP fails to connect to insight.

Is there something else that needs done to have the WiFi actually operate on the tagged VLAN? 

(phone is able to connect to the WiFi, but it gives a 'no internet' error, and assigns an ip of 192.168.10.x .... I do not have any DHCP running on any vlan that assigns at x.x10.x)

2 Replies

  • schumaku's avatar
    schumaku
    Guru - Experienced User

    Hello JohnMLCL​ 

     

    JohnMLCL wrote:

    (phone is able to connect to the WiFi, but it gives a 'no internet' error, and assigns an ip of 192.168.10.x .... I do not have any DHCP running on any vlan that assigns at x.x10.x)

     

    Have by accident defined the specific SSID  for that WiFi network to NAT Mode? Than the AP will operate a local-only IP subnet including a DHCP server for that SSID.

     

    Local Web UI; Advanced -> Addressing and Traffic -> NAT Mode

    resp.

    WLAN -> SSIDx -> Network Settings -> Addressing and Traffic -> NAT 

    ...and some subnet address and mask somehow matching 192.168.10.x

     

    This would make the WAP acting as a NAT router, hiding all traffic under the WAP configured LAN IP address however. 

     

    JohnMLCL wrote:

    I am having issues with my Insight Managed WAC540 to properly connect to a VLAN.
    If I send data untagged, it works perfectly fine on the default VLAN for the device, but I assign a SSID to be on a given VLAN, and it just doesn't connect to the VLAN.

     

    Very unclear.

     

    Talking of the WAP "LAN" interface which you intend to operate on a dedicated subnet on a tagged management VLAN?

     

  • Hello!

    On the WAC540, you need to keep the management VLAN untagged so the AP can reach Insight, and then tag any SSID VLANs on the switch port. If clients connect but get a 192.168.10.x address, that means there’s no DHCP server on the VLAN you assigned to the SSID, so they self‑assign. The fix is to configure the switch port as a trunk with the native VLAN untagged and the SSID VLANs tagged, confirm the SSID is mapped to the right VLAN in Insight, and ensure DHCP is available on that VLAN. That way, WiFi clients will join the correct VLAN and get proper IPs. 

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More