TP-LINK TL-SG108E VLAN configuration issue

[Mitch Rapp]

@mcury
This router is a tri-band - 2.5ghz, 5ghz, & 5ghz.
the third band is for back-haul to the other Decos

[mcury]

@mitch-rapp Hm, I see...
So, as far as I understood from your topology, you will be connecting a cable to each one of these decos, right?
If so, the mesh would work in the same way, even better..
You would only use wifi mesh in case you can't connect a cable directly to the AP.

[Mitch Rapp]

@mcury
click here for Deco X90 specifications

[Mitch Rapp]

@mcury
That is correct!

[mcury]

@mitch-rapp Taking a look at it, give me a few minutes..
But will you be connecting a cable from the switch (TL-SG108E) to each deco?
Or these decos will be connected to each other by WIFI ?

[mcury]

@mitch-rapp Ok, try to add the other decos to see what happens

[Mitch Rapp]

@mcury

Connecting the second one now!

[Mitch Rapp]

@mcury

They will all be connected to the SG108E switch by Ethernet.

[mcury]

@mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

They will all be connected to the SG108E switch by Ethernet.

Perfect, so, you should just turn them on, and after two minutes, they should be working already.
Confirm if that is working, then move through the ambient and confirm if the mesh is working the way you want to

[Mitch Rapp]

@mcury

2nd one is online and working. Moving to third

“Ambient?”

[mcury]

@mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

“Ambient?”

Place wherever you are, sorry, sometimes my English fails on me.. :)

[mcury]

If you are going to use the homeshield pro features, we will have to change a few things..

[Mitch Rapp]

@mcury

Ok, I did get that before I bought the pfsense router with firewall.
What do I need to change?

[mcury]

@mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

@mcury

Ok, I did get that before I bought the pfsense router with firewall.
What do I need to change?

Few things to consider:

• Change the operation mode to router mode, instead of ap mode.
• New network behind the Decos
• Create a new NAT entry in pfsense.
• Change the firewall rule in pfsense.
• Create a static route in pfsense.
• Disable DHCP in pfsense.

I can't find where to disable NAT in these Decos, which means that you wouldn't be able to filter users IPs in pfsense, all IPs would natted before they reach pfsense...
So, pfsense would see only the Deco IP

[Mitch Rapp]

@mcury

Ok, let’s tackle those items tomorrow. My family is mad right now because they’re not getting any attention today. I’ve been battling this (along side you) for two solid days nonstop.

I’m worried if I change it back to Router mode, it will stop working again. Will test tomorrow.

All decos online!

I cannot thank you enough for getting me to this point. You are the most patient person I’ve come across in IT. I am deeply in your debt.

David.

[mcury]

You are welcome =)

[Mitch Rapp]

@mcury

Are you ready to tackle these items? :-)

Few things to consider:

Change the operation mode to router mode, instead of ap mode.
New network behind the Decos
Create a new NAT entry in pfsense.
Change the firewall rule in pfsense.
Create a static route in pfsense.
Disable DHCP in pfsense.

I can't find where to disable NAT in these Decos, which means that you wouldn't be able to filter users IPs in pfsense, all IPs would natted before they reach pfsense...
So, pfsense would see only the Deco IP

[mcury]

Sure, but the question is, do you really want to?
I didn't find anything in the Deco documentation saying how to disable the NAT.

If we really can't disable NAT in the Deco, keep in mind that pfsense rules, pfsense logs, pfsense filters like pfblocker and etc, would only see the Deco IP..
Also, portforward and things like that, you would have to create them twice, once in pfsense, then create that same rule in the Deco..

Can you tackle around the device options to see if you can find a NAT disable option?

[Mitch Rapp]

@mcury
Sure, let me do some checking.

[Mitch Rapp]

@mcury
I don't think you can disable NAT in this particular Deco model. :-(

Would there by any advantage to changing it from the way it is now? I don't think I will need Port forwarding on any of my wireless devices.

I am still curious what the VLAN feature is on the Deco, in Router mode only. You can set a VLAN ID and a priority (0-7) . Is that even useful to me?

One question I do have is about QoS for my Wifi network. It has always confused me. Would that be set at the SG108E, the Main Deco (10.28.28.2) , or in Pfsense.

And, depending on the answer, if at the switch, would the Main deco be given the priority, and if at the Main Deco, would the switch be given the priority? or, perhaps something different?