MartinPhone wrote

In its simplest form, my issue is this: I attempt to set my VLANs up like so: https://community.tp-link.com/en/business/kb/detail/69

But I can never manage to get this to work. I am always unable to ping the router from any of the ports.
 

Port	1	2	3	4	5	6	7	8
VLAN	1, 2	1, 2	1, 2	1, 2	1, 2	1, 3	1, 3	1, 2, 3
PVID	2	2	2	2	2	3	3	1
Link Type	General	General	General	General	General	General	General	General
Connected to	PC	PC	PC	PC	PC	WA801ND	<spare>	Router

 

Only when I change the PVID to 1 for all ports, can I even ping the router, but then this strikes me as not having properly separated the networks. 

Ultimately, I would like to have:

My router
2 x SG3210 switches (called SG3210 A and SG3210 B)
1 x WA801ND Access Point.

Router connects to SG3210 A (port 8)
SG3210 A connects to SG3210 B (port 1 on both)
SG3210 A connects to WA801ND (port 7)

The users connected to the WA801ND cannot talk to any of the PCs connected to the switches.

 

I then read forum posts saying I shouldn't be using General, and should use Access instead, but this doesn't work either. 

 

Totally baffled and getting increasingly so! Could I even use the WA801ND to solve this more easily?

 

Any thoughts welcome!

Hi  Martin:

     Do you configure  Multi-SSID in TL-WA801ND?

     I sugget you upload the configuration form of SG3210 A and SG3210 B together, maybe we can help you to find the reason.