Hi @james_dui
You can create as many VLANs as you want and then assign those VLANs by SSID, however, keep in mind that your router must be able to function as a DHCP server for each VLAN, this means assigning a different subnet for each VLAN you have created, then on the ICX 7150 Switch you need to tag all the new VLANs you have created on the ports you have connected the Access Points and to the port where the ISP router is connected; however, if you have no idea what I am trying to explain I advise you to hire an experienced network technician; however, let me give you the steps.
1:Gain access to the Switch via CLI(command line interface)via SSH, Telnet or console.
How to remotely access to 'ICX 7150-12P' or 'access points' "Network devices"
How to console in the ICX-7150-12CP 'Ruckus Switch'
RUCKUS ICX 7150 USB TYPE C CONSOLE (tutorial video for ICX)
https://www.youtube.com/watch?v=YXR4xhkw3q8
(Tutorial for MAC)
https://www.youtube.com/watch?v=1AcJokMm78U
2: Configuring the Switch:
enable
show lldp neighbor (here you can discover in which ports the access points are connected)
show mac-address (you can discover what port the router is connected)
Note: take into consideration that if you have other devices wired to the Switch and those devices are required to get an IP address in one specific VLAN that device must be untagged, for example, a computer.
Configuring the VLANs.
enable
Configure terminal
vlan 100
tagged ethernet 1/1/1
tagged ethernet 1/1/2
Note: you will tag all the VLANs you have created for the SSIDs, by default VLAN 1 will be untagged which is the VLAN where the Access Points get their own IP address, now if you have created another management VLAN that VLAN must be untagged to remove the regular untagged for VLAN 1, the next document will explain more technical the VLAN segregation, also remember to tag all those new VLAN to the port where the ISP router is connected, so the Switch allows the traffic coming from those VLANs, take in consideration that if you have a device wired to the Switch such a computer and belong to a not management or default VLAN, the VLAN that belongs to, must be untagged, because end devices do not understand the consent of tagging.
How do I segregate traffic between two SSIDs using VLANs
https://support.ruckuswireless.com/articles/000001547
2:No, from the new SSIDs you have created you need to assign those VLANs accordantly.
WLANs> Create New/Edit> Advanced Options and enter the Vlan ID.
Best regards,
Yarenis Hernández.
Technical Support Engineer | L2 TAC Wired | Lennar Home Community
