This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Configure AP55s with 2 SSIDs and 2 VLANs

Tam Ben-Jusu over 6 years ago

I have some AP55s connected to a XG230.

They are broadcasting 1 SSID, Bridge to AP LAN, with no problems

I would like them to broadcast another SSID (called guest) on a seprate VLAN.

What's the best way to set this up?

I can create the wireless network with no problems

SSID* = guest

Client Traffic = Bridge to VLAN

Bridge to VLAN id* = 2

But when I try to add that 'guest' network and AP to the existing Default Access Point Group, with VLAN Tagging enabled and AP VLAN ID of 2, I get an error.

Btw, both networks are allowed in the single wifi Zone.

Many thanks for any help

This thread was automatically locked due to age.

Parents

0 BAlfson over 6 years ago

Hi Matthew and welcome to the UTM Community!

Does VLAN 2 already exist? Why not simply make this a separate zone?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to BAlfson

Many thanks for the reply, Bob.

Yep the VLAN already exists.

It is a VLAN interface (3.10) attached to a WLAN physical interface (3).

If I create a separate wireless zone will I have to get rid of the existing VLAN?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to Tam Ben-Jusu

Can the AP 55 "see" VLAN 2? If not, then use "Separate zone" and bridge the resulting virtual NIC, wlan#, to VLAN 2.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 6 years ago in reply to Tam Ben-Jusu

Can the AP 55 "see" VLAN 2? If not, then use "Separate zone" and bridge the resulting virtual NIC, wlan#, to VLAN 2.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Tam Ben-Jusu over 6 years ago in reply to BAlfson

Thank you Bob.. will try first thing tomorrow.
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to BAlfson

I've created wlan# (in its own zone) and it now has a WiFi interface in Protect > Networks but I cannot receive an IP address?

I have

I'm pretty sure it is because I cannot enable VLAN tagging on wlan# to receive the ip addresses from the XG.

I've noticed exactly the same problem posted in the community 2 years ago.

https://community.sophos.com/products/unified-threat-management/f/wireless-security/77661/how-do-i-have-one-ssid-bridged-to-ap-lan-and-one-ssid-bridged-to-vlan
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to Tam Ben-Jusu

The trick is to create a br0 with an unused NIC and then move VLAN2 to that NIC.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to BAlfson

Thanks Bob,

So, the present config:

NIC 3 (untagged WLAN)

NIC 3.2 (tagged VLAN2)

Move VLAN2 to empty NIC 4

and bridge NIC 4 to ?

Would NIC 4 then present as a 'Bridge to AP LAN' (not a Bridge to VLAN) to the AP55?

Sorry never attempted anything like this before...
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to Tam Ben-Jusu

I have created a wireless network as a Separate Zone which has also created virtual interface wlnet1.

I have enabled DHCP on wlnet1

But I do not have the option in Network > Add Interface > Add Bridge to bridge wlnet1 to an existing NIC?

Can this not be done?

Many thanks again for any help.
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to Tam Ben-Jusu
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to Tam Ben-Jusu

Sorry, Matthew, I just saw that you're working with XG and I'm not an expert with it, nor are few people here. This is the UTM Community, so you'll want to post your question in the XG Community.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel