DrayTek UK Users' Community Forum
Help, Advice and Solutions from DrayTek Users
VLAN on AP903 LAN Port
- foggy69
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 19
- Thank you received: 0
07 Feb 2021 15:20 #98392
by foggy69
Sorry, my previous post was slightly wrong. To clarify and to provide a bit more information.
I have the VLAN0 LAN1 (192.168.1.xx) with no VLAN tag VID set for my home network. I have VLAN1 LAN2 (192.168.2.xx) as a guest network with a specific VID tag.
The 2926 and both the AP903's are on the VLAN0 LAN1 (192.168.1.xx) subnet.
The Mesh Root is wired to the 2926.
When the laptop's network card was prompted to connect to the VID tag for VLAN1 LAN2 (192.168.2.xx) on both AP903's, the computer did see the 2926 on 192.168.1.xx, but could not see the AP903 on the same subnet or anything on the home network.
I was just a bit surprised that I could see the 2926 router from the VLAN1 LAN2 (192.168.2.xx) subnet as I have unchecked 'Permit untagged device in P1 to access router'.
Replied by foggy69 on topic Re: VLAN on AP903 LAN Port
Piste Basher wrote:
when I plugged the laptop into the Mesh Root AP903, I could not access IP addresses on the VLAN0 LAN1 (192.168.1.xx),
Sorry but I'm a bit confused - you say that your Mesh Root AP903 is wiredto the 2926, but if you plug the laptop into it it does not see LAN 1? But surely the AP903 is simply acting as a basic switch in this scenario? I don't understand that.
Sorry, my previous post was slightly wrong. To clarify and to provide a bit more information.
I have the VLAN0 LAN1 (192.168.1.xx) with no VLAN tag VID set for my home network. I have VLAN1 LAN2 (192.168.2.xx) as a guest network with a specific VID tag.
The 2926 and both the AP903's are on the VLAN0 LAN1 (192.168.1.xx) subnet.
The Mesh Root is wired to the 2926.
When the laptop's network card was prompted to connect to the VID tag for VLAN1 LAN2 (192.168.2.xx) on both AP903's, the computer did see the 2926 on 192.168.1.xx, but could not see the AP903 on the same subnet or anything on the home network.
I was just a bit surprised that I could see the 2926 router from the VLAN1 LAN2 (192.168.2.xx) subnet as I have unchecked 'Permit untagged device in P1 to access router'.
Please Log in or Create an account to join the conversation.
- piste basher
- Offline
- Big Contributor
Less
More
- Posts: 1199
- Thank you received: 9
07 Feb 2021 16:36 #98394
by piste basher
Replied by piste basher on topic Re: VLAN on AP903 LAN Port
Sorry, but I'm still puzzled. If I connect my laptop to my guest network - and check that it has an IP address of 192.168.2.10 - then I most definitely cannot "see" my router on 192.168.1.1, or indeed anything else on my main network. This is irrespective of the setting of "allow untagged device in P1 to access the router".
You don't have Inter-LAN routing enabled by any chance?
You don't have Inter-LAN routing enabled by any chance?
Please Log in or Create an account to join the conversation.
- foggy69
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 19
- Thank you received: 0
07 Feb 2021 17:52 #98396
by foggy69
I do have Inter-LAN routing enabled. This is because I need computers on VLAN0 LAN1 (192.168.1.xx) to see and control devices on VLAN1 LAN2 (192.168.2.xx). Because of this, I also have a firewall data filter setup blocking data from VLAN1 LAN2 (192.168.2.xx) to VLAN0 LAN1 (192.168.1.xx). This seemed like the easiest way to deal with the requirement.
Replied by foggy69 on topic Re: VLAN on AP903 LAN Port
Piste Basher wrote:
Sorry, but I'm still puzzled. If I connect my laptop to my guest network - and check that it has an IP address of 192.168.2.10 - then I most definitely cannot "see" my router on 192.168.1.1, or indeed anything else on my main network. This is irrespective of the setting of "allow untagged device in P1 to access the router".
You don't have Inter-LAN routing enabled by any chance?
I do have Inter-LAN routing enabled. This is because I need computers on VLAN0 LAN1 (192.168.1.xx) to see and control devices on VLAN1 LAN2 (192.168.2.xx). Because of this, I also have a firewall data filter setup blocking data from VLAN1 LAN2 (192.168.2.xx) to VLAN0 LAN1 (192.168.1.xx). This seemed like the easiest way to deal with the requirement.
Please Log in or Create an account to join the conversation.
- hornbyp
- Offline
- Big Contributor
Less
More
- Posts: 1323
- Thank you received: 0
08 Feb 2021 02:33 #98398
by hornbyp
But presumably only on Port 1 of the 2926, with the "Permit untagged device in P1 to access router " ticked?
The LAN ports on the AP903 appear to just bridge all traffic through to the Wireless link, for the far end to sort out.
(Which begs the question: "Why even have a 'Bridge VLAN to Mesh ' option at all?" - does it just apply to its Wifi?)
If you add my favourite little
Netgear switch GS105Ev2
downstream of the AP903, it can do the job of tagging/untagging the traffic for you. (Normally less than £25 inc delivery, from Amazon).
Replied by hornbyp on topic Re: VLAN on AP903 LAN Port
foggy69 wrote:
Unfortunately, the device I want to connect has no facility to change the settings for VLAN tags ID. If it is plugged directly into the 2926, it is quite happy to connect to whatever VLAN I set it too.
But presumably only on Port 1 of the 2926, with the "Permit untagged device in P1 to access router
The LAN ports on the AP903 appear to just bridge all traffic through to the Wireless link, for the far end to sort out.
(Which begs the question: "Why even have a 'Bridge VLAN to Mesh
If you add my favourite little
Please Log in or Create an account to join the conversation.
- piste basher
- Offline
- Big Contributor
Less
More
- Posts: 1199
- Thank you received: 9
08 Feb 2021 10:49 #98400
by piste basher
Replied by piste basher on topic Re: VLAN on AP903 LAN Port
OK so I have braved the cold of the garage once again to undertake a further test.
You don't say what the "device" is that you wish to connect, but you say that you can set it to connect to a specific VLAN so I am assuming that, like a PC network adapter, you can tell it to use a specific IP address and gateway address.
So I took my laptop out again and this time I told it to connect to 192.168.2.10, rather than "obtain an IP address automatically", and leaving the VLAN tag unset. On plugging into the AP903 node it obediently connected to the 192.168.2.x network.
I have of course piped all three of my VLANs to the mesh network in the router settings. As I suspected from my tests yesterday, all of the VLANS are present on the ethernet ports of the wirelessly connected AP903 in the garage - and I have now shown that it is not necessary to use VLAN tagging on the device if you are able to tell the device which VLAN to use.
So as I see it, if you can plug your device into the router and tell it which VLAN to connect to (assuming you have piped that VLAN to whichever port you're using) then there is no reason why you can't do the same on any of the wired or wireless AP903s in your system.
Unless I have completely misunderstood what your problem is, I can only think that there's something amiss with your settings somewhere along the line, but imho I don't think you can blame the AP903s.
You don't say what the "device" is that you wish to connect, but you say that you can set it to connect to a specific VLAN so I am assuming that, like a PC network adapter, you can tell it to use a specific IP address and gateway address.
So I took my laptop out again and this time I told it to connect to 192.168.2.10, rather than "obtain an IP address automatically", and leaving the VLAN tag unset. On plugging into the AP903 node it obediently connected to the 192.168.2.x network.
I have of course piped all three of my VLANs to the mesh network in the router settings. As I suspected from my tests yesterday, all of the VLANS are present on the ethernet ports of the wirelessly connected AP903 in the garage - and I have now shown that it is not necessary to use VLAN tagging on the device if you are able to tell the device which VLAN to use.
So as I see it, if you can plug your device into the router and tell it which VLAN to connect to (assuming you have piped that VLAN to whichever port you're using) then there is no reason why you can't do the same on any of the wired or wireless AP903s in your system.
Unless I have completely misunderstood what your problem is, I can only think that there's something amiss with your settings somewhere along the line, but imho I don't think you can blame the AP903s.
Please Log in or Create an account to join the conversation.
- foggy69
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 19
- Thank you received: 0
08 Feb 2021 14:27 #98402
by foggy69
Thank you for braving the cold for this.
The device is a Myenergi Hub, it is used to monitor power usage and control certain devices within the house.
There appears to be no way to access the network settings of the device, and the way I got it to connect to specific VLAN's was to use the 'Bind IP to MAC' setting or plugged it into ports on the 2926 that having been configured for VLAN1 LAN2 (192.168.2.xx).
I have contacted their technical support to ask for advice.
Replied by foggy69 on topic Re: VLAN on AP903 LAN Port
Piste Basher wrote:
OK so I have braved the cold of the garage once again to undertake a further test.
You don't say what the "device" is that you wish to connect, but you say that you can set it to connect to a specific VLAN so I am assuming that, like a PC network adapter, you can tell it to use a specific IP address and gateway address.
Thank you for braving the cold for this.
The device is a Myenergi Hub, it is used to monitor power usage and control certain devices within the house.
There appears to be no way to access the network settings of the device, and the way I got it to connect to specific VLAN's was to use the 'Bind IP to MAC' setting or plugged it into ports on the 2926 that having been configured for VLAN1 LAN2 (192.168.2.xx).
I have contacted their technical support to ask for advice.
Please Log in or Create an account to join the conversation.
Moderators: Chris, Sami
Copyright © 2024 DrayTek