T2600G-28MPS how to separate networks?
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
T2600G-28MPS how to separate networks?
Model :
Hardware Version :
Firmware Version :
ISP :
Hello Eyerybody,
im trying to install a hotspot environment in our company. Im using a ER6120 Router, several T2600-G 28MPS Switches and several EAP330 Accesspoints.
The APs shall provide two SSIDs. One "Internet Hotspot" for the customers and one "Office WiFi" for our service staff. Both SSIDs or networks share the same Internet connection but must be separated internally.
So i followed the instructions in this guide:
DHCP works fine so far. When i log into the "Internet Hotspot" Network I get an IP of 172.168.0.0 /21 (VLAN20) and when I log into the "Office WiFi" I get an IP of 192.168.128.0 /21 (VLAN10). Also when I attach the Laptop directly to the switch I get the correct IP depending on the VLAN config of the port.
Now my problem is, that both Networks communicate with each other. So when I log into the "Internet Hotspot" (no difference, if I use WiFi or cable (both VLAN20)) with my Laptop and obtain an IP of 172.168.0.0/21, then I can still access my NAS which is directlly attached to the switch ("Office" VLAN10, fix IP 192.168.128.7 /21).
To my understanding, this should not be possible for two reasons:
First: the two devices are in differents subnets (192... /21 and 172... /21)
Second : the two devices are in different VLANs (20 and 10)
Do I have to configure an ACL (port or VLAN bound? ) or is the VLAN configuration wrong?
Im just on my way to get into the advanced networking world, so I hope I dont annoy the experts with my noob questions.
Thanks for your help.
Kind regards Bertl
Hardware Version :
Firmware Version :
ISP :
Hello Eyerybody,
im trying to install a hotspot environment in our company. Im using a ER6120 Router, several T2600-G 28MPS Switches and several EAP330 Accesspoints.
The APs shall provide two SSIDs. One "Internet Hotspot" for the customers and one "Office WiFi" for our service staff. Both SSIDs or networks share the same Internet connection but must be separated internally.
So i followed the instructions in this guide:
How to configure Multiple SSIDs with Multiple Subnets on EAP products
http://www.tp-link.de/faq-1849.htmlDHCP works fine so far. When i log into the "Internet Hotspot" Network I get an IP of 172.168.0.0 /21 (VLAN20) and when I log into the "Office WiFi" I get an IP of 192.168.128.0 /21 (VLAN10). Also when I attach the Laptop directly to the switch I get the correct IP depending on the VLAN config of the port.
Now my problem is, that both Networks communicate with each other. So when I log into the "Internet Hotspot" (no difference, if I use WiFi or cable (both VLAN20)) with my Laptop and obtain an IP of 172.168.0.0/21, then I can still access my NAS which is directlly attached to the switch ("Office" VLAN10, fix IP 192.168.128.7 /21).
To my understanding, this should not be possible for two reasons:
First: the two devices are in differents subnets (192... /21 and 172... /21)
Second : the two devices are in different VLANs (20 and 10)
Do I have to configure an ACL (port or VLAN bound? ) or is the VLAN configuration wrong?
Im just on my way to get into the advanced networking world, so I hope I dont annoy the experts with my noob questions.
Thanks for your help.
Kind regards Bertl
