GS316EPP - VLAN config for Guest network

Question

I just bought a GS316EPP switch to replace an IntelliNet switch which worked well, except that the fan goes bad after 1 year, and after having one replaced under warranty I've given up with it.

I have three WAPs and the Guest network is hard wired to tag VLAN 1003. This is fine witth no VLAN settings on the switch. The Guest network transactions get passed to the router which allocates a sub net of 192.168.13.0/24, but the rest of the network is on the default domain, 192.168.1.0/24. I really want to break out my iot devices on to a different subnet, say VLAN 30, and change my other home network to VLAN 15. Then I can set about setting firewall rules to prevent cross VLAN traffic.

Anyy suggestions how I do this on this switch?

CrimpOn · Answer

Harmansend&nbsp;wrote:
Any suggestions how I do this on this switch?&nbsp;

Which router is this switch connected to?

Harmansend · Answer

A Ubiquiti edgerouter-4

Harmansend · Answer

And i guess my real question is how to tag the untagged messages coming from the WAP withou compromising the already tagged guest network messages

CrimpOn · Answer

Harmansend&nbsp;wrote:
And i guess my real question is how to tag the untagged messages coming from the WAP without compromising the already tagged guest network messages

Wireless access points generally have no concept of VLANs.&nbsp; They accept WiFi connections, pass the DHCP requests on to the router, and then hand the IP information back to the device.&nbsp; WiFi Access points that are part of an integrated package may have an internal method of tagging primary and guest WiFi networks, but that is built into the router/satellite connectivity.
&nbsp;
If every device connecting to some of these WiFi access points is clearly "guest", then I would think that port based VLAN does what you want. Every untagged packet coming into the port gets tagged with the guest VLAN, thus the Edgerouter knows what to do with it.
&nbsp;
But, if the WiFi access point accepts both guest and (non-guest?) connections, you're screwed.

Harmansend · Answer

These WAPS plug 1003 as the tag, and it can't be changed. Other traffic on the WAP is untasted

Forum Discussion

GS316EPP - VLAN config for Guest network

6 Replies