× NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Orbi WiFi 7 RBE973
Reply

Synology Guest WiFi (VLAN ID 1733, Synology mesh WiFi system) with Netgear GS752TPP Switch

maxxiger
Follower

Synology Guest WiFi (VLAN ID 1733, Synology mesh WiFi system) with Netgear GS752TPP Switch

Hello everyone, I have been trying for a few weeks to set my Netgear GS752TPP switch so that the guest WiFi works with my Synology RT2600AC and Synology MR2200AC.

 

Unfortunately without success.

 

According to Synology, a VLAN (VLAN ID 1733, tagged) must be created on a managed switch. Namely on the ports where the RT2600AC and the MR2200AC are connected. For me these are ports 43-48.

 

The Netgear GS752TPP is my main switch. A sub-switch is also connected to some of the network sockets of ports 43-48 (e.g. in the office, living room).

 

Has anyone had this problem before? Which settings have to be made in this window (attachment)?

 

Imade the settings shown here, but it didn't work.

Does somebody has any idea?

 

Many Thanks!

 

Max

Model: GS752TPP|48-Port Gigabit Ethernet PoE+ Smart Managed Pro Switch with 4 SFP Ports (760W)
Message 1 of 7
schumaku
Guru

Re: Synology Guest WiFi (VLAN ID 1733, Synology mesh WiFi system) with Netgear GS752TPP Switch

Hallo Max,

Ja und nein.... 

 

The problem starts with Synology's incomplete documentation in the Router SRM 1.2 manual (no word on how the Guest VLAN is really working over a wired network!) and does top with the (in my opionon very odd if not simply awfuly wrong) information provided My guest network is not functioning properly when the mesh Wi-Fi system has been set up. What can I ... Yes, I have an idea what they tested ... simply extending ONLY the guest network to the access point in a "dumb" mode only.

 

Permitting both the AC2600AC and the MR2200AC in Access Point mode are operating

  • normal network as VLAN 1, untagged, and 
  • guest network as VLAN 1733, tagged, so
  • the router and all access points are supporting the main and the guest network
  • a direct network cable connection between the AC2600AC router and one MR2200AC in AP mode does make both the normal network as well as the guest network run on the both Wireless as expected, this does proof (most) of the above assumptions.

If not done already, create the VLAN 1733 as a 802.1q VLAN on the switch.

 

Case A. Each port connecting to the AC2600AC router and the MS2200AC access points must be configured like this:

 

  1. VLAN 1, [U]ntagged, PVID 1 ... this makes the normal network running, and applies also to ports where you want to connect computers, printers, and whatever has access to the main network. The switch will send any untagged frames incoming to the VLAN 1 (this is what the PVID 1 is for), and send frames from the VLAN 1 out untagged to the connected device.
  2. VLAN 1733, [T]agged.  ...this makes the guest network - which is a 802.1q tagged network - to send and receive VLAN 1733 tagged frames from/to the VLAN 1733.
  3. Double check the port(s) are set to allow tagged and untagged (both) packets/frames.

Case B. In case you like to make a switch port assigned to the guest VLAN (and only then!) use this:

 

  1. VLAN 1733, [U]ntagged, PVID 1733 ... this makes the normal network running, and applies also to ports where you want to connect computers, printers, and whatever has access to the main network. The switch will send any untagged frames incoming to the VLAN 1733 (this is what the PVID 1733 is for), and send frames from the VLAN 1733 out untagged to the connected device.
  2. Allow only untagged packets/frames.

As simple as this.

 

In case you would consider heading to Netgear Insight managed wireless access points (and optionally switches), you create the VLAN 1733 on the switch, configure the ports as shown above, create one SSID for VLAN 1, and the Guest SSID for VLAN 1733. Same story as above...

 

In case you want to connect some consumer class APs supporting only one SSID and one VLAN only, use the configuration as in the case B above.

 

Viel Erfolg!

 

-Kurt

Message 2 of 7
ppcina
Aspirant

Re: Synology Guest WiFi (VLAN ID 1733, Synology mesh WiFi system) with Netgear GS752TPP Switch

And how should be setup ports between switches in "Case A" if I have more then one swich ?  

Thank you for your help.

Message 3 of 7
schumaku
Guru

Re: Synology Guest WiFi (VLAN ID 1733, Synology mesh WiFi system) with Netgear GS752TPP Switch


@ppcina wrote:

And how should be setup ports between switches in "Case A" if I have more then one swich ?  


You configure trunk ports on both sides to connect the switches as shown in the Case A. The base VLAN will run untaged, the Guest VLAN will run tagged.

 

 

Message 4 of 7
ppcina
Aspirant

Re: Synology Guest WiFi (VLAN ID 1733, Synology mesh WiFi system) with Netgear GS752TPP Switch

because it doesn't work in my case, i drew a picture and please check if it's OK

SynologyMesh-CiscoSwitch.JPG

Message 5 of 7
ppcina
Aspirant

Re: Synology Guest WiFi (VLAN ID 1733, Synology mesh WiFi system) with Netgear GS752TPP Switch

I configured port as described above and finally Guest WiFi is visible. Unfortunatelly devices connected via AP MR2200ac are not getting correct IP address and are not connected to internet. Do you have please any idea why it could be?

Thank you Petr

Message 6 of 7
ppcina
Aspirant

Re: Synology Guest WiFi (VLAN ID 1733, Synology mesh WiFi system) with Netgear GS752TPP Switch

Thank you very much for help. WiFi finally works.

Message 7 of 7
Top Contributors
Discussion stats
  • 6 replies
  • 2919 views
  • 1 kudo
  • 3 in conversation
Announcements