trouble with multiple VLANs on TP-Link sg108E easy smart switch; Ubiquiti UAP-AC-Pro and Pfsense
-
I do not know if this is the right place for this question. So here is goes........
My Pfsense box is configured on LAN with: (these are not actual IP's)
primary network 192.168.1.1/24 for dept A staff in building
VLAN10 (192.168.2.1/24) for dept B staff in building
VLAN20 (192.138.3.1/24 for Dept A Guests
VLAN30 (192.168.4.1/24 for Dept B Guests
PfSense has all firewall rules set correctly for access to webI have 8 port sg108E TP-Link switch configured:
port 1 = uplink to Pfsense (VLAN1) untagged
port 2 = VLAN1 untagged (native for primary net)
port 3 = VLAN1 untagged (native for primary net)
port 4 = VLAN1 untagged (native for primary net)VLAN10
port 1 = uplink to Pfsense (VLAN1) tagged
port 5 = VLAN10 tagged (has unifi AP)
port 6 = VLAN10 untagged
port 7 = VLAN10 untagged
port 8 = VLAN10 untaggedUnifi AP has 4 wireless networks:
dept a staff no VLAN
dept b staff VLAN10
dept a guest VLAN20
dept b guest VLAN30The AP works fine for dept a staff (no vlan)
dept b staff (vlan10)But, I cannot get connection for the two guest VLANS
What am I missing?
Thanks for any hints
-
You don't show that you are also tagging VLANs 20 and 30 on ports 1 and 5.
-
If I'm reading your description right, you've got only VLAN 10 going to the AP. You need a trunk port that carries all VLANs. Also, I don't see how you could get staff to work on the AP, as you don't seem to have a connection for the native LAN to the AP.
BTW, some TP-Link switches have problems with VLANs and I believe the fault may allow the native LAN to get through where it's not supposed to. This may be how the staff LAN is getting through.
