topic Re: Change Unleashed to be able to use VLANS in Access Points - Indoor and Outdoor

Change Unleashed to be able to use VLANS

BCMascha — Thu, 16 Dec 2021 21:24:13 GMT

Greetings!

Lately I have taken over an old WiFi-project which was once installed by someone in a restaurant/cafe.

Sadly enough it is a mess. The Ruckus APs are simply just connected to the router he placed, changed the SSID and called it a day. Litteraly everything is on 1 network. Guests, employees and even the checkouts! That is something we really do NOT want.

Currently there are 4 Ruckus R320 Unleashed APs hanging in the building. The idea now is to create different SSID's and VLANS so that everything is going to be seperated.

For example:

(VLANS are done in a DrayTek 2865Va, AP's connect to a P2540x)
SSID 1 = Employees = VLAN60

SSID 2 = Guests = VLAN90

SSID 3 = Checkout devices and such = VLAN 30

But as I understood it is not possible to create seperated SSIDs and point them to different VLANS with those APs.

As far as I've read and understand, I need the ZoneDirector 1200 and then upgrade the firmware of the Unleashed AP's, to ZoneFlex firmwares so that they will be stand-alone AP's, add them to ZoneDirector and then be able to point different SSIDs to different VLANS.

My question is, is this true and am I right on track? And if it is, can I then accomplish what I want? Also what firmware should be put onto them? Or is there another way/device to accomplish what i want which is cheaper? The ZoneDirector is pretty expensive, so I want to be sure 😄

Thanks!

Re: Change Unleashed to be able to use VLANS

raymond_lau_740 — Thu, 16 Dec 2021 21:33:12 GMT

I definitely have 2 SSIDs with 2 VLANs..... Go into Edit WLAN (for the SSID) > Advanced Options > WLAN Priority > Access VLAN and put in the number of your VLAN.

Re: Change Unleashed to be able to use VLANS

eizens_putnins — Fri, 17 Dec 2021 06:34:07 GMT

You don't need Zd for VLAN setup. Unleashed supports VLANs, it's a basic functionality.

What you need to do is ocnfigure all ports, to which APs are connected as trunks,, with native (untagged) VLAN used for APmanagement, and all others tagged. You need managed switch for that. Check if your router supports multiple internal VLANs and multiple DHCP -- most home routers don't support it, than you need to use L3 switch to route between networks and provide ACLs. Better is to use some firewall or at least reasonable router, supporting multiple networks and firewalling between them. Any firewall, such Watchguard or similar, will do, as well as you can use Mikrotik routers (they are very cheap, have a lot of pro features but are not intuitive in configuration - so there is a lot of info on google, how to do it).

Re: Change Unleashed to be able to use VLANS

DarrelRhodes — Fri, 17 Dec 2021 13:54:40 GMT

@BCMascha As indicated by the other posters, Unleashed is certainly able to provide the VLAN functionality you require and has been able to do so for some time.

To apply a specific VLAN to an SSID (WLAN in Ruckus terminology) this setting is configured in the WLAN 'advanced options' setup section. Details here: https://docs.commscope.com/bundle/unleashed-200.9-onlinehelp/page/GUID-13F1D151-3C8F-418E-AE52-085924715CE4.html

Another question we often encounter is regarding the management VLAN on Unleashed. I'm delighted to confirm this feature has now been added in version 200.10: https://docs.commscope.com/bundle/unleashed-200.10-troublshootingref/page/GUID-06BD65BC-B300-4F74-8285-4F785075D761.html

Very importantly; as advised by eizens; you must ensure that your entire LAN supports the VLANs you configure in the Unleashed interface, in order for data traffic to flow.

Regarding your firmware version; R320 are supported on the latest version of Unleashed; 200.11.

I hope the above helps,
Darrel.

Re: Change Unleashed to be able to use VLANS

BCMascha — Sat, 18 Dec 2021 10:53:53 GMT

Thanks guys for the explanations! I found the stuff that I need and it works perfectly atm. Also I will be definitely looking into firewalls!

EDIT: What I only don't know/understand is how to force the AP to get another native VLAN. It is now going to VLAN1 by default, but what if I want it to be VLAN60 including the WLAN from the employees, since WLAN only accepts tagged VLANS?

I gave the AP ports untagged 60, tagged 90 and 30. The AP is now reachable from VLAN60, but the SSID won't work as it is not tagged and won't give out IP's. In VLAN1 (Or whatever VLAN I'm going to give the default one) are all the 'managed' devices (Router, switches, etc) so I want the AP to stay away from that VLAN, or is it save enough to leave them there?

What I do see happening, is that when I give the SSID an Access VLAN of 1, it will give an IP from VLAN60 though, but I'm not sure if this is the right way to do it :'D It does work as I want though...

Re: Change Unleashed to be able to use VLANS

jason_simmons_c — Mon, 20 Dec 2021 12:38:15 GMT

The easiest way to set the management vlan is just to set the native vlan that you want( eg VLAN60) and make sure that is untagged on the switch port that connects the AP ( Your AP must be on a trunk port )

If it all tagged then you can set the management vlan on the device ( I dont use unleashed in my solutions, assuming its the same) Look under configuration->device->internet you can set the management vlan.

**make sure you have your switch trunk port set correctly as you could cut yourself off from the AP if you get the 802.1q tags wrong**

This is way setting the native untagged vlan on the switch is the easiest option