Correct way to setup AP with multiple SSIDs (VLANs) through a switch to Firewalla Gold router

Follow

Casper

• November 03, 2021 17:39

Hi,

I need some help to figure out this following setup:

- AP (TL-WA1201) with 2 VLANS (11, 22) connecting to port 2 on a switch.

- 8-port Switch (TL-SG108E) with port 1 goes to port 1 on Firewalla.

- On Firewalla, I created 3 networks: 2 VLANs (11, 22) and 1 LAN, all go to port 1 (switch)

+ VLAN 1 - Guest: VLAN ID 11

+ VLAN 2 - IoT: VLAN ID 22

+ LAN 1: I can see both AP and Switch devices

Problem: Devices aren't able to connect to any of the VLANs even though SSIDs are broadcasting. But when I connected the AP directly to port 1 without the Switch, it worked fine.

So I suspect that the VLAN IDs couldn't pass through the Switch and Firewalla wasn't able to recognize the VLAN IDs?

0

• 

  Firewalla

  • November 03, 2021 19:01

  Look at the port on the switch connecting to Firewalla, make sure it is a "trunk port" or "tagged port". You probably want to check the same port connecting to AP on the switch as well. 

  0

  Comment actions Permalink
• 

  Casper

  • November 03, 2021 19:12

  I couldn't find any option for "trunk". For "tagged" I can see some options, not sure which VLAN ID should I put here? Port 2 is the AP

  0

  Comment actions Permalink
• 

  Firewalla

  • November 03, 2021 20:01

  For example, if you connect port 1 to Firewalla, you need to check the "tagged" 

  "tagged port": it is a port expecting VLAN packets ... packets with VLAN header.

  0

  Comment actions Permalink
• 

  Casper

  • November 03, 2021 20:53

  Here's what I got so far

  

  Port 1 going to firewalla and port 2 to AP. I created tagged VLANs on switch for both port with same IDs that came from AP. 

  After a reboot, the AP device showed up under VLAN 55 on Firewalla (it used to be on the same LAN network as switch).

  Do you know why Firewalla "recognizes" AP from VLAN 55 instead of 11 or 22? They're all setup the same with default setting (create new network). VLAN 55 is 5Ghz whereas 11 and 22 are 2.4. Not sure if that makes a difference.

  0

  Comment actions Permalink
• 

  James Willhoite

  • November 09, 2021 22:09

  @Casper, I have this setup at my House. Take a look at this post, I have screen shots on how I set up my configuration

  https://help.firewalla.com/hc/en-us/community/posts/1500000053802-Can-Multiple-VLANs-exist-on-one-port-Can-they-coexist-with-a-LAN-on-one-port-

   

  0

  Comment actions Permalink
• 

  Casper

  • November 09, 2021 22:49

  Thanks @James, I actually figured it out. Culprit was the cheap AP (TP-Link AC1200), it couldn't handle multi-ssid for some reason. I replaced with EAP255 and everything worked.

  0

  Comment actions Permalink

Please sign in to leave a comment.