How to setup VLAN on GS510TPP + WAX620

[jasonh77tw]

I have two routers, one is for office users and the other is for guests. I just got my new GS510TPP with WAX620 *4 and I want to connect these routers and APs to GS510TPP.

In order to share the APs with office users and guests while isolate them in different network, I tried to arrange different VLAN and SSID settings on GS510TPP and WAX620 (via Insight Cloud) but with no success.

It would be great if someone can help me 🙂

Jason Huang 

[schumaku]

Start from the config with the primary router dealing with the primary LAN as the default VLAN (VLAN 1) allowing the GS110TPP and all WAX620 admin.

Add one VLAN for this guest network, for example VLAN 200.

Define one additional port as an access port for the additional, new guest LAN router (say VLAN 200, [U]ntagged, PVID 100).

Add the four ports connecting the WAX620 to the VLAN 200 [T]agged.

Define the Guest VLAN SSID on all the WAX620' to work on the VLAN 200.

Connect the GS110TPP access port configured for the VLAN 200 to the second router LAN. 

Chime back if this simple guide is not sufficient 8-)

Are you using Negear Insight for this, or are you managing the switch and WAX manually / locally?

Happy weekend!

[jasonh77tw]

Hi schumaku

Thanks for your advice, I configured the switch like this and it works.

I can access different internet connection through different SSID now, but I'm wondering that is it really safe? I mean are devices using SSID A/VLAN1 really isolated from devices using SSID 2/VLAN2?

Thanks again.

[schumaku]

Have to guess...

g8 is connecting to the router 2 making the VLAN 2, it's IP subnet, and the matching Internet access available?

g1 is connecting to the router 2 making the VLAN 1, it's IP subnet, and the matching Internet access available?

The two SSIDs are assigned to the VLAN 1 (intentionally both untagged and tagged?) and VLAN 2 (tagged), the AP (or the APs) are connecting to g2...g7.