Setting up Guest WLAN

[EvilGrin]

Hi guys,

I'm trying to set up a Guest WLAN to be completetly separate from our network and only allow internet access. The line I want to use has a Draytek Vigor 2800 router, and I have a Ruckus 2942 wireless AP. Both units support VLANs, but I have no clue how to configure them - have never needed to mess with VLANs before!

Draytek have this on their support site: http://www.draytek.co.uk/support/kb_vigor_vlan.html

It sounds great in principle, but how to set it up in practice? I understand that those options there will set for example switch port 1 as VLAN1, and port 2 as VLAN2, but how does it work, I can't see a way to configure VLAN1 to be on say 192.168.0.x and VLAN2 to be on 192.168.1.x, or am I completely missing the point?

For our main network, our file server is the DHCP server, so ideally I'd like our wireless AP to sit on VLAN 2 and serve DHCP, to have a subnet of 192.168.1.x.

The Ruckus unit states that it supports VLANs in much the same way as the Draytek, I can't see a way of separating the IP addressing.

I'm confused. Any help would be much appreciated!

 

[EvilGrin]

The IP addressing is separated by using different scopes for each VLAN. (or indeed different servers). Then all you do is configure the Interface with an IP in that subnet for that VLAN. Depending on the kit this can either be the router port itself or a virtual VLAN interface.

Stuff to think about:

Both VLAN address ranges will need to be included in any NAT rules to get internet access.
Access control lists need adding to the router interfaces to stop the guest network getting access to the production network.
Configuring VLANs on the router is fine if everything plugs into it directly, but of there's a switch in the middle you will need that to support VLANs too. In which case you'll need to go off and read about 802.1Q vlan tagging and how that works, else you'll get yourself in a right muddle.

Thanks for the quick reply.

Yeah this is where I'm getting confused; all that I can see for configuring the VLAN is Vlan1 - P1, Vlan2 - P2 etc., there's nothing that I can see in any of the settings windows for configuring/defining the scope of Vlan 1 and 2... In addition to this, I can't see any way of turning on DHCP for one specific VLAN either. Urgh.

My plan was to keep things simple by plugging the AP in directly to the appropriate router port (although I do have layer 3 switches which I know will complicate things ad infinatum).

 

[EvilGrin]

Yeah, problem I have is that I have no idea where to start with configuring VLANs on the poweredge 6224/6248 switches, I can see all the settings in OpenManage, but without knowing what I'm doing, it's pretty damn confusing.

Any tips/pointers?