Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

what does "AP VLAN ID" actually do in Access point groups?

Hello, 

We've on-boarded a client with a Sophos XG firewall and four APX530 access points. They are currently set up under an Access Point Group with VLAN tagging enabled and the AP VLAN ID set to 2. 

I'm trying to figure out why VLAN 2, and what this actually does.



This thread was automatically locked due to age.
Parents
  • So basically you can give the AP a VLAN ID, which the AP will use for all "management traffic". 

    That means, the AP will communicate via VLAN ID X with the XG. 

    If you activate VLAN Tagging, the AP can only talk with VLAN IDs. 

    So the Bridge to AP LAN Mode will actually bridge everything into VLAN ID 2.

    Only Bridge to AP VLAN will use another VLAN ID for certain SSIDs. 

    XG does not support VLAN ID 1 (which is most likely untagged). 

    __________________________________________________________________________________________________________________

  • Thanks for the info, if VLAN tagging is disabled in the AP Group, does that mean the individual SSID's will no longer support VLAN tagging as well? Just trying to understand the scope of this feature.

Reply Children
  • If you start to build Wireless with VLAN, everything has to be VLAN, there cant be any traffic untagged by this AP anymore. 

    Group VLAN is just a quick way to publish VLAN. You can also specify a special VLAN per AP. That is possible. 

    __________________________________________________________________________________________________________________