Cannot connect to VLAN via AP

Rcluce

I have an NWA50AX AP connected to a GS1200-8HPv2 switch. The AP has 2 SSIDs, one for office and another for guests. I have configured the office SSID as VLAN 1 and guest SSID to be on VLAN2. The port the AP is connect on has both VLAN 1 and 2 as ingress. I can connect to the office SSID but the guest SSID (VLAN2) just sits there trying to connect. I don't know what I'm doing wrong. Any help would be appreciated.

Zyxel_Kay

Hi @Rcluce

Based on your description, it seems the issue might be related to how VLAN2 traffic is being handled in your network. Let’s go through the setup step-by-step to ensure everything is configured correctly:

Switch Configuration (GS1200-8HPv2)

Assuming your setup:

• Port 1: Connected to your Firewall/Router
• Port 2: Connected to your Access Point

You should configure the VLANs on the switch as follows:

• VLAN 1 (Office): Tag Port 1 and Port 2
• VLAN 2 (Guest): Tag Port 1 and Port 2

This setup ensures the switch correctly handles and forwards VLAN2 traffic to your firewall/router. For detailed guidance and tutorials, you can refer to this article:

https://community.zyxel.com/en/discussion/17957/how-to-configure-vlan-for-web-managed-switch

Firewall/Router Configuration

After confirming the VLAN setup on the switch, please check the following on your firewall/router (DHCP server):

1. Verify DHCP Configuration:
   • Ensure that the DHCP server is configured to assign IP addresses for VLAN 2 (guest SSID).
   • VLAN 2 should have its own DHCP scope or range.
2. Check Firewall Rules:
   • Make sure traffic from VLAN 2 is allowed to access the internet.
   • If isolation between VLAN 1 (office) and VLAN 2 (guest) is required, you can create specific firewall rules to block inter-VLAN traffic.
3. Router VLAN Support:
   • Verify that your router/firewall supports VLAN tagging and routing between VLAN interfaces.

After applying these configurations, please test the connection again and let us know if the issue persists.

Looking forward to hearing back from you!

Zyxel_Kay

Hi @Rcluce

Based on your description, it seems the issue might be related to how VLAN2 traffic is being handled in your network. Let’s go through the setup step-by-step to ensure everything is configured correctly:

Switch Configuration (GS1200-8HPv2)

Assuming your setup:

• Port 1: Connected to your Firewall/Router
• Port 2: Connected to your Access Point

You should configure the VLANs on the switch as follows:

• VLAN 1 (Office): Tag Port 1 and Port 2
• VLAN 2 (Guest): Tag Port 1 and Port 2

This setup ensures the switch correctly handles and forwards VLAN2 traffic to your firewall/router. For detailed guidance and tutorials, you can refer to this article:

https://community.zyxel.com/en/discussion/17957/how-to-configure-vlan-for-web-managed-switch

Firewall/Router Configuration

After confirming the VLAN setup on the switch, please check the following on your firewall/router (DHCP server):

1. Verify DHCP Configuration:
   • Ensure that the DHCP server is configured to assign IP addresses for VLAN 2 (guest SSID).
   • VLAN 2 should have its own DHCP scope or range.
2. Check Firewall Rules:
   • Make sure traffic from VLAN 2 is allowed to access the internet.
   • If isolation between VLAN 1 (office) and VLAN 2 (guest) is required, you can create specific firewall rules to block inter-VLAN traffic.
3. Router VLAN Support:
   • Verify that your router/firewall supports VLAN tagging and routing between VLAN interfaces.

After applying these configurations, please test the connection again and let us know if the issue persists.

Looking forward to hearing back from you!