Zyxel switch + Unifi APs -> configure guest WLAN?
Hi,
I just bought a new XGS1930-52HP switch to our company. We replaced a bunch of smaller mixed brand switches with this one. This switch is now our only switch. We have a few couple of years old Ubiquiti Unifi AC pro WLAN APs in our office which we do not want to replace. Our firewall is Cisco ASA5510.
The guest WLAN is important for us. ACpros are configured for our company network 10.10.x.x/24 and for guest network 192.168.1.x/24/VLAN100. Firewall is configured to support this arrangement.
The question:
I want to configure this new Zyxel switch so that the guests do not see and cannot use the resources in the internal network. The only access for the guest is to have very limited access to internet using our "line". Do I need to configure this switch somehow to support guest VLAN of those ACpros?
I just bought a new XGS1930-52HP switch to our company. We replaced a bunch of smaller mixed brand switches with this one. This switch is now our only switch. We have a few couple of years old Ubiquiti Unifi AC pro WLAN APs in our office which we do not want to replace. Our firewall is Cisco ASA5510.
The guest WLAN is important for us. ACpros are configured for our company network 10.10.x.x/24 and for guest network 192.168.1.x/24/VLAN100. Firewall is configured to support this arrangement.
The question:
I want to configure this new Zyxel switch so that the guests do not see and cannot use the resources in the internal network. The only access for the guest is to have very limited access to internet using our "line". Do I need to configure this switch somehow to support guest VLAN of those ACpros?
0
All Replies
-
If you are using multiple VLANs on the same port, you should probably set the VLANs up in the switch and set those ports to Tag Egress Packets for that VLAN.
0 -
Hi @Zakman
If your firewall's been configured to handle the traffic filtering as you mentioned, as for switch you just need to make sure the uplink/downlink ports to firewall/AP must be fixed for the internal VLAN and Guest VLAN (VLAN100), just like @ThomasKenyon suggested.
Let us know if there is any further concern/question.
Zyxel_Lucious0
Categories
- All Categories
- 347 Beta Program
- 2.1K Nebula
- 114 Nebula Ideas
- 77 Nebula Status and Incidents
- 5K Security
- 44 USG FLEX H Series
- 246 Security Ideas
- 1.2K Switch
- 65 Switch Ideas
- 901 WirelessLAN
- 33 WLAN Ideas
- 5.8K Consumer Product
- 204 Service & License
- 326 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.8K FAQ
- 831 Nebula FAQ
- 401 Security FAQ
- 219 Switch FAQ
- 190 WirelessLAN FAQ
- 45 Consumer Product FAQ
- 136 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 71 About Community
- 61 Security Highlight