Zyxel switch + Unifi APs -> configure guest WLAN?
Hi,
I just bought a new XGS1930-52HP switch to our company. We replaced a bunch of smaller mixed brand switches with this one. This switch is now our only switch. We have a few couple of years old Ubiquiti Unifi AC pro WLAN APs in our office which we do not want to replace. Our firewall is Cisco ASA5510.
The guest WLAN is important for us. ACpros are configured for our company network 10.10.x.x/24 and for guest network 192.168.1.x/24/VLAN100. Firewall is configured to support this arrangement.
The question:
I want to configure this new Zyxel switch so that the guests do not see and cannot use the resources in the internal network. The only access for the guest is to have very limited access to internet using our "line". Do I need to configure this switch somehow to support guest VLAN of those ACpros?
I just bought a new XGS1930-52HP switch to our company. We replaced a bunch of smaller mixed brand switches with this one. This switch is now our only switch. We have a few couple of years old Ubiquiti Unifi AC pro WLAN APs in our office which we do not want to replace. Our firewall is Cisco ASA5510.
The guest WLAN is important for us. ACpros are configured for our company network 10.10.x.x/24 and for guest network 192.168.1.x/24/VLAN100. Firewall is configured to support this arrangement.
The question:
I want to configure this new Zyxel switch so that the guests do not see and cannot use the resources in the internal network. The only access for the guest is to have very limited access to internet using our "line". Do I need to configure this switch somehow to support guest VLAN of those ACpros?
0
All Replies
-
If you are using multiple VLANs on the same port, you should probably set the VLANs up in the switch and set those ports to Tag Egress Packets for that VLAN.
0 -
Hi @Zakman
If your firewall's been configured to handle the traffic filtering as you mentioned, as for switch you just need to make sure the uplink/downlink ports to firewall/AP must be fixed for the internal VLAN and Guest VLAN (VLAN100), just like @ThomasKenyon suggested.
Let us know if there is any further concern/question.
Zyxel_Lucious0
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 151 Nebula Ideas
- 98 Nebula Status and Incidents
- 5.7K Security
- 277 USG FLEX H Series
- 277 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.4K Consumer Product
- 250 Service & License
- 395 News and Release
- 85 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 75 Security Highlight