VLAN-specific protected ports (GS1900-24HPv2)

nemSoma

Hey all,

I have a GS1900-24HPv2 switch.
I have two wireless access points connected to port 1 & port 2 of my switch.
Both access points are hosting a main and a guest Wi-Fi network, which are on VLANs 1 and 2 respectively. (PVID is 1 for port 1 & 2, while VLAN 2 is tagged)
I want to set it up so that clients of the guest Wi-Fi can't talk to each other, but the clients of the main Wi-Fi can.
My switch has a "Protected Port" feature, which if I enable on two ports of my switch, it will block communication between those two ports.
My problem is that if I enable this feature on port 1 & 2, it will block communication not only between the clients of the guest network, but the main network as well (assuming the two clients are connected to different access points).

Is there a way to do what I want on this switch?

Zyxel_Chris

Welcome to Zyxel community!! @nemSoma
There are another ways which is more fits in this case, if you use NSG/USG Flex as the gateway then can activate the guest Vlan in interface setting page.
 
If you don't have Nebula gateway then can configure in AP SSID settings (your guest VLAN ssid), please note that you need to put gateway MAC address, also the DHCP server MAC if you have another server for it.

Zyxel_Chris

@nemSoma
If your switch is standalone then "VLAN isolation" can fulfill this case but GS1900 does not support this feature please use GS1920 or GS2220 series instead.