ER7206 setup vlan without Omada

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

ER7206 setup vlan without Omada

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
ER7206 setup vlan without Omada
ER7206 setup vlan without Omada
2022-10-07 08:08:49
Model: ER7206 (TL-ER7206)  
Hardware Version: V1
Firmware Version: 1.2.1

Hi All,

 

Is there any information on how to setup a vlan without an Omada controller?

I have tried to create two vlans, one at a range of 192.168.0.100 - 192.168.0.199 and the second one 192.168.10.100 - 192.168.10.199.

All devices connected to the range of 192.168.0.x are working fine, but the device (EAP225-outdoor) within the range of 192.168.10.x is getting an ip address from the ER7206, but doesn't assign any ip addresses to the WiFi devices.

I hope someone can help me.

 

Thanks in advance.

Peter

  0      
  0      
#1
Options
4 Reply
Re:ER7206 setup vlan without Omada
2022-10-07 08:23:20

  @PeterHer 

 

How are you setting up the vlan ports?

 

If you want devices over wifi from the EAP to connect to different vlans based on tagging, you must include each vlan on the port its connected to on the 7206 in tagged mode and set the eap to insert the tags

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x1, ES205G x2, EAP650 x6 Remotes: ER605 v2 x3, SG2008P x2, EAP650 x2 VPN Server: ER7206 v2 Controller: OC300
  0  
  0  
#2
Options
Re:ER7206 setup vlan without Omada
2022-10-07 09:04:47 - last edited 2022-10-07 09:05:56

  @GRL 

 

Thanks for your reply.

I only want wired devices port 3 of ER7206 connected to TL-SG1024 (192.168.0.100 - 192.168.0.199)

to be separated from the WiFi devices port 5 of ER7206 connected to EAP225 (192.168.10.100 - 192.168.10.199).

Both vlans should be able to connect to the internet. No connection between the two vlans are necessary.

 

  0  
  0  
#3
Options
Re:ER7206 setup vlan without Omada
2022-10-07 09:22:19

  @PeterHer 

 

Then you need to set up 1 (or two if you want) Access Control Lists

 

Rule 1 - Block / LAN>LAN / Protect_From_VLAN / Destination_VLAN

Rule 2 - Block / LAN>LAN / Destination_VLAN / Protect_From_VLAN

 

I always like to set rules both ways

 

Note that the gateway IP (of the 7206) on any vlan is always accessible from any other vlan, which is a bug reported multiple times

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x1, ES205G x2, EAP650 x6 Remotes: ER605 v2 x3, SG2008P x2, EAP650 x2 VPN Server: ER7206 v2 Controller: OC300
  0  
  0  
#4
Options
Re:ER7206 setup vlan without Omada
2023-03-15 06:45:12

  @GRL 

 

> Note that the gateway IP (of the 7206) on any vlan is always accessible from any other vlan, which is a bug reported multiple times

 

Godd*mn it! Is that why I can't get ACL to work on my ER7206 V1? It's still not working in firmware version 1.2.3 in 2023?

 

My post

  0  
  0  
#5
Options