topic Re: ICX-7150, AP510, and AX1800 VLAN Help in RUCKUS Support for Lennar Homes

ICX-7150, AP510, and AX1800 VLAN Help

james_dui — Sun, 11 Dec 2022 02:41:04 GMT

Dear all,

I need help on creating separate VLAN for my IOT, Home Computer/Phone, Work Computer/Phone

I'm stuck as my created VLAN 2, 3, and 4 have no internet.

First step. Created VLANs on ICX-7150 browser:

https://imgur.com/xNOTWjl

Second step. Assigned VLANs to SSID on R510 browsers:

https://imgur.com/6y9Fkos

I think I missed a step. Can someone provide any advice? All WIFI SSID work if I give them VLAN 1. However, I have a lot of IOTS that open myself as a cybersecurity threat.

Thank you for your time!

Re: ICX-7150, AP510, and AX1800 VLAN Help

Yarenis — Mon, 12 Dec 2022 17:51:19 GMT

Hi @james_dui

Are you a Lennar customer? Now from the Switch you can create multiple VLANs, and assign those VLANs by SSID, however your ISP router must be able to provide DHCP for all those VLAN/SUbnets, now from the Switch it is able to become your DHCP server for those VLANs, but it is the same, the ISP router must be able to manage all the new subnets and by default only the enterprise routers are capable for that.

Best regards,

Yarenis Hernández

Technical Support Engineer | L2 TAC Wired

Re: ICX-7150, AP510, and AX1800 VLAN Help

james_dui — Fri, 23 Dec 2022 22:49:03 GMT

Yes! I bought a new Lennar home in 2020. I took some networking classes through my community college to learn more about my hardware.

I bought the ER-X.

Is this the step?

Create VLAN on ER-X. Connect R510 to ER-X eth4/POE Out. Assign VLAN to R510. Plug ICX-7150 to ER-X eth1?

Re: ICX-7150, AP510, and AX1800 VLAN Help

Yarenis — Fri, 23 Dec 2022 23:19:31 GMT

Hi @james_dui

You can create as many VLANs as you want and then assign those VLANs by SSID, however, keep in mind that your router must be able to function as a DHCP server for each VLAN, this means assigning a different subnet for each VLAN you have created, then on the ICX 7150 Switch you need to tag all the new VLANs you have created on the ports you have connected the Access Points and to the port where the ISP router is connected; however, if you have no idea what I am trying to explain I advise you to hire an experienced network technician; however, let me give you the steps.

1:Gain access to the Switch via CLI(command line interface)via SSH, Telnet or console.

How to remotely access to 'ICX 7150-12P' or 'access points' "Network devices"

https://community.ruckuswireless.com/t5/RUCKUS-Support-for-Lennar-Homes/How-to-remotely-access-to-ICX-7150-12P-or-access-points-quot/td-p/47388

How to console in the ICX-7150-12CP 'Ruckus Switch'

https://community.ruckuswireless.com/t5/RUCKUS-Support-for-Lennar-Homes/How-to-console-in-the-ICX-7150-12c-using-a-Windows-Machine/td-p/46759

RUCKUS ICX 7150 USB TYPE C CONSOLE (tutorial video for ICX)

https://www.youtube.com/watch?v=YXR4xhkw3q8

(Tutorial for MAC)

https://www.youtube.com/watch?v=1AcJokMm78U

2: Configuring the Switch:

enable

show lldp neighbor (here you can discover in which ports the access points are connected)

show mac-address (you can discover what port the router is connected)

Note: take into consideration that if you have other devices wired to the Switch and those devices are required to get an IP address in one specific VLAN that device must be untagged, for example, a computer.

Configuring the VLANs.

enable

Configure terminal

vlan 100

tagged ethernet 1/1/1

tagged ethernet 1/1/2

Note: you will tag all the VLANs you have created for the SSIDs, by default VLAN 1 will be untagged which is the VLAN where the Access Points get their own IP address, now if you have created another management VLAN that VLAN must be untagged to remove the regular untagged for VLAN 1, the next document will explain more technical the VLAN segregation, also remember to tag all those new VLAN to the port where the ISP router is connected, so the Switch allows the traffic coming from those VLANs, take in consideration that if you have a device wired to the Switch such a computer and belong to a not management or default VLAN, the VLAN that belongs to, must be untagged, because end devices do not understand the consent of tagging.

How do I segregate traffic between two SSIDs using VLANs

https://support.ruckuswireless.com/articles/000001547

2:No, from the new SSIDs you have created you need to assign those VLANs accordantly.

WLANs> Create New/Edit> Advanced Options and enter the Vlan ID.

Best regards,

Yarenis Hernández.

Technical Support Engineer | L2 TAC Wired | Lennar Home Community

Re: ICX-7150, AP510, and AX1800 VLAN Help

james_dui — Mon, 26 Dec 2022 06:52:38 GMT

Here is my running/saved config. Is the VLAN set properly on Putty? Or do you need more information? I'm trying to narrow it down if it is a router or switch configuration issue. I hope to setup the switch accurately and move on to router diagnosis.

Current configuration:

ver 08.0.90jT211

stack unit 1

module 1 icx7150-c12-poe-port-management-module

module 2 icx7150-2-copper-port-2g-module

module 3 icx7150-2-sfp-plus-port-20g-module

stack-port 1/3/1

stack-port 1/3/2

vlan 1 name DEFAULT-VLAN by port

spanning-tree 802-1w

vlan 10 name IOT by port

tagged ethe 1/1/1

spanning-tree 802-1w

vlan 20 name Work by port

tagged ethe 1/1/1

spanning-tree 802-1w

vlan 30 name Home by port

tagged ethe 1/1/1

spanning-tree 802-1w

Re: ICX-7150, AP510, and AX1800 VLAN Help

Yarenis — Mon, 26 Dec 2022 15:27:28 GMT

Hi @james_dui

The Tag on port 1/1/1 seems fine, however take in consideration that you need to tag all the ports where access point are connected and also the port that going to your ISP router, because that is the gateway for all the traffic.

Best regards,

Yarenis Hernández.

Technical Support Engineer | L2 TAC Wired | Lennar Home Community

Re: ICX-7150, AP510, and AX1800 VLAN Help

james_dui — Mon, 26 Dec 2022 19:25:24 GMT

My VLAN works now. I just had to tag 1/1/1 (connected to R51) and tag 1/1/2 (connected to router). Thanks for everything.

Re: ICX-7150, AP510, and AX1800 VLAN Help

Yarenis — Mon, 26 Dec 2022 19:28:17 GMT

Great, I am glad that it's working fine.

Best regards,

Yarenis Hernández.

Technical Support Engineer | L2 TAC Wired | Lennar Home Community