VLANs

[cheechm]

I'm trying to set up VLAN segregation for a guest wireless network. The setup is as follows:

1x 3Com 2920 Managed switch

Internet from router into port 1 of 3Com switch.

2x Unifi UAP-Pro plugged into Netgear Unmanaged POE switch

The unmanaged switch into port 2 of 3Com switch

Unifi controller into port 3 of 3Com switch.

The WAP has two SSIDs. Private & Guest. These can each have different VLAN IDs, but I'm not sure how to go about setting this up.

Ideally I want both SSIDs to have internet access, but only have the private SSID have access to other things on the network such as Sonos. Can the internet port (1) be part of 2 VLANs?

Thanks

 

[Caged]

Your PoE switch doesn't support VLANs, so you can't use them on your APs.

 

[Zarf]

Does your Unify setup support tunneling traffic back to the controller? Enterprise equipment often does.If so, and if your router also supports VLANs then you can do it.
Multiple VLANs on one port is fine, its called trunking. Just tag ports 1 and three with both the default and the guest VLAN ID's.
Setting up the router will usually involve creating sub interfaces for each VLAN and setting up the routing/firewalling rules.