12-10-2022 06:41 PM
Dear all,
I need help on creating separate VLAN for my IOT, Home Computer/Phone, Work Computer/Phone
I'm stuck as my created VLAN 2, 3, and 4 have no internet.
First step. Created VLANs on ICX-7150 browser:
Second step. Assigned VLANs to SSID on R510 browsers:
I think I missed a step. Can someone provide any advice? All WIFI SSID work if I give them VLAN 1. However, I have a lot of IOTS that open myself as a cybersecurity threat.
Thank you for your time!
Solved! Go to Solution.
12-26-2022 07:27 AM
Hi @james_dui
The Tag on port 1/1/1 seems fine, however take in consideration that you need to tag all the ports where access point are connected and also the port that going to your ISP router, because that is the gateway for all the traffic.
Best regards,
Yarenis Hernández.
Technical Support Engineer | L2 TAC Wired | Lennar Home Community
12-12-2022 09:51 AM
Hi @james_dui
Are you a Lennar customer? Now from the Switch you can create multiple VLANs, and assign those VLANs by SSID, however your ISP router must be able to provide DHCP for all those VLAN/SUbnets, now from the Switch it is able to become your DHCP server for those VLANs, but it is the same, the ISP router must be able to manage all the new subnets and by default only the enterprise routers are capable for that.
Best regards,
Yarenis Hernández
Technical Support Engineer | L2 TAC Wired
12-23-2022 02:35 PM - edited 12-23-2022 02:49 PM
Yes! I bought a new Lennar home in 2020. I took some networking classes through my community college to learn more about my hardware.
I bought the ER-X.
Is this the step?
Create VLAN on ER-X. Connect R510 to ER-X eth4/POE Out. Assign VLAN to R510. Plug ICX-7150 to ER-X eth1?
12-23-2022 03:19 PM
Hi @james_dui
You can create as many VLANs as you want and then assign those VLANs by SSID, however, keep in mind that your router must be able to function as a DHCP server for each VLAN, this means assigning a different subnet for each VLAN you have created, then on the ICX 7150 Switch you need to tag all the new VLANs you have created on the ports you have connected the Access Points and to the port where the ISP router is connected; however, if you have no idea what I am trying to explain I advise you to hire an experienced network technician; however, let me give you the steps.
1:Gain access to the Switch via CLI(command line interface)via SSH, Telnet or console.
How to remotely access to 'ICX 7150-12P' or 'access points' "Network devices"
How to console in the ICX-7150-12CP 'Ruckus Switch'
https://www.youtube.com/watch?v=YXR4xhkw3q8
(Tutorial for MAC)
https://www.youtube.com/watch?v=1AcJokMm78U
2: Configuring the Switch:
enable
show lldp neighbor (here you can discover in which ports the access points are connected)
show mac-address (you can discover what port the router is connected)
Note: take into consideration that if you have other devices wired to the Switch and those devices are required to get an IP address in one specific VLAN that device must be untagged, for example, a computer.
Configuring the VLANs.
enable
Configure terminal
vlan 100
tagged ethernet 1/1/1
tagged ethernet 1/1/2
Note: you will tag all the VLANs you have created for the SSIDs, by default VLAN 1 will be untagged which is the VLAN where the Access Points get their own IP address, now if you have created another management VLAN that VLAN must be untagged to remove the regular untagged for VLAN 1, the next document will explain more technical the VLAN segregation, also remember to tag all those new VLAN to the port where the ISP router is connected, so the Switch allows the traffic coming from those VLANs, take in consideration that if you have a device wired to the Switch such a computer and belong to a not management or default VLAN, the VLAN that belongs to, must be untagged, because end devices do not understand the consent of tagging.
How do I segregate traffic between two SSIDs using VLANs
https://support.ruckuswireless.com/articles/000001547
2:No, from the new SSIDs you have created you need to assign those VLANs accordantly.
WLANs> Create New/Edit> Advanced Options and enter the Vlan ID.
Best regards,
Yarenis Hernández.
Technical Support Engineer | L2 TAC Wired | Lennar Home Community
12-25-2022 10:52 PM
Here is my running/saved config. Is the VLAN set properly on Putty? Or do you need more information? I'm trying to narrow it down if it is a router or switch configuration issue. I hope to setup the switch accurately and move on to router diagnosis.
Current configuration:
ver 08.0.90jT211
stack unit 1
module 1 icx7150-c12-poe-port-management-module
module 2 icx7150-2-copper-port-2g-module
module 3 icx7150-2-sfp-plus-port-20g-module
stack-port 1/3/1
stack-port 1/3/2
vlan 1 name DEFAULT-VLAN by port
spanning-tree 802-1w
vlan 10 name IOT by port
tagged ethe 1/1/1
spanning-tree 802-1w
vlan 20 name Work by port
tagged ethe 1/1/1
spanning-tree 802-1w
vlan 30 name Home by port
tagged ethe 1/1/1
spanning-tree 802-1w