Dream Machine and Sophos CS210

You have one untagged VLAN, this should be the native management VLAN1 assigned to that port.

Then you assign the other VLANs as tagged to the same port, so let's say you use 10,20,30,40,50 and 60 as tagged VLAN ID for your 6 APs.

That's it.

Just to clarify: each AP gets one VLAN ID assigned to the port it is attached to, you can/should use untagged VLAN here. Only the dream machine needs the config I described before.

Just to clarify: each AP gets one VLAN ID assigned to the port it is attached to, you can/should use untagged VLAN here. Only the dream machine needs the config I described before.

Thank you for your help, I implemented your recommendations, are there any tricks to get the dhcp traffic to pass?

Hello Ken,

you are using 6 different VLANs to seperate traffic. Then you need either 6 DHCP servers running on each "VLAN interface" of your dream machine or you need a DHCP relay running on the switch. I can help you with the latter:

In the switch configuration GUI goto to "Configure/L3 protocol/DHCP relay" turn the global setting on and define the IP address of your dream machine, if this is DHCP-server for the 6 LAN segments.

Thank you for your help.  After tagging the ports of the APs per your first post all is well.

Good to hear, thanks for giving us the info how you solved it finally.