I just bought a GS316EPP switch to replace an IntelliNet switch which worked well, except that the fan goes bad after 1 year, and after having one replaced under warranty I've given up with it.
I have three WAPs and the Guest network is hard wired to tag VLAN 1003. This is fine witth no VLAN settings on the switch. The Guest network transactions get passed to the router which allocates a sub net of 192.168.13.0/24, but the rest of the network is on the default domain, 192.168.1.0/24. I really want to break out my iot devices on to a different subnet, say VLAN 30, and change my other home network to VLAN 15. Then I can set about setting firewall rules to prevent cross VLAN traffic.
And i guess my real question is how to tag the untagged messages coming from the WAP without compromising the already tagged guest network messages
Wireless access points generally have no concept of VLANs. They accept WiFi connections, pass the DHCP requests on to the router, and then hand the IP information back to the device. WiFi Access points that are part of an integrated package may have an internal method of tagging primary and guest WiFi networks, but that is built into the router/satellite connectivity.
If every device connecting to some of these WiFi access points is clearly "guest", then I would think that port based VLAN does what you want. Every untagged packet coming into the port gets tagged with the guest VLAN, thus the Edgerouter knows what to do with it.
But, if the WiFi access point accepts both guest and (non-guest?) connections, you're screwed.
