09-13-2022 01:44 AM
Hello Everyone!
We have a mesh network of Ruckus R510 and R610. We have a work SSID and a second Guest SSID that we want to isolate in a dedicated VLAN.
I read the following documentation https://support.ruckuswireless.com/articles/000001547 but since we don't have Zone Director we tried the following:
What we tried was:
1. We configured each switch PoE port to which each Ruckus is connected to have default VLAN ID 1 in access, for our office work network and VLAN ID 192 tagged.
2. In the Guest WiFi, in the WLAN Priority tab, we set "Access VLAN" to 192 assuming that clients connected to SonarGuest WiFi will be able to connect on VLAN 192.
Unfortunately, with this setup Guest WiFi clients were not able to connect to the DHCP server running in VLAN 192.
Considering that our Ruckus APs are connected to an L3 PoE switch, can you please help what will be the correct Ruckus AP and/or switch port configuration to have the Guest WiFi clients connected to a dedicated VLAN? Do I absolutely need to have Zone Director to achieve the split configuration?
Thank you in advance for your help!
Mario
09-23-2022 08:38 PM
Hi @MSP
Once you create an Guest WLAN a default ACL profile is created, below FYR. Additionally assuming that both VLAN on your setup has inter-Vlan routing done (which means the Vlan 1 can access Vlan 2) you can add the subnet range for Vlan1 on ACL and block.
https://www.youtube.com/watch?v=S3Y1Np_Xpqk
Best Regards
Vineet