Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Rogue Leader]

Hi all. I have been dealing with this for a while and worked with D-Link support who tried to help but couldn't find a resolution. I contacted Engenius tech support who was no help, and it still doesn't work.

I have the following equipment:
D-Link DSR-250 Router (on newest 2.01 firmware)
Engenius EGS-2110p PoE 8 port switch
2x Engenius EAP 9550 WAP
D-Link DGS-1024D 24 port switch (unrelated to the issue but mentioned in full disclosure to the network setup).

The DSR-250 has a cable modem connected to the WAN Port.

Port 2 on the DSR-250 is connected to Port 8 on the EGS-2110p. Each EAP 9550 is connected to ports 1 and 2 of the EGS-2110p

Each EAP 9550 is configured with 2 VLAN networks, lets call them Home and Guest, VLAN 1 and 2 respectively.

On the DSR-250 side VLAN 1 is the default network, the DHCP is configured to provide IP addresses from 192.168.1.20 to 192.168.1.199. VLAN 2 is the guest network and its DHCP is assigned 192.168.2.20 to 192.168.2.199.

Port 2 (physical connection to PoE port is set to Trunk and assigned VLAN 1 and 2. Its PVID is set to 1 but I believe that doesn't matter when set to trunk.

If I plug into Port 7 on the PoE with a laptop like this and I set the port to VLAN 1 or 2 I get an IP address from the respective VLAN pool. So we know VLAN 1 and 2 both work

Here's the issue, obviously I don't want to point the WAP's to specific VLANs but have both available on both, so I tried setting Port 8 to Trunk. If I do that I cannot get an IP address over either VLAN, If i set it (Port to tagged as well, only VLAN 1 works, Then I tried setting Port 1 and 2 to trunk as well, I've tried  setting them as tagged (802.1Q), I've tried PVID's, I've tried every possible combination and no matter what I can't get both VLANs to work. If it does work its only the default VLAN 1, VLAN 2 never works.  On the WAP side I have tried turning on management and setting its tag to 1.  No matter what I do the best I can get is VLAN 1 works and VLAN 2 does not.

My goal here is for the home network to be for myself and my wife to access anything on the network. Guest is for friends and family to be able to use the Internet but be unable to access my server, sound system, tv's, etc. Yes I have nosy semi computer savvy family members.

Any ideas?

(Please note ports 3-6 on the PoE switch have IP security cameras wired to them, they should be on the default network and it seems those ports if I just leave them alone, are fine).

[PacketTracer]

Hi,

I think the problem is that you can't configure PVID=1 and  both VID 1 and VID 2 being trunked (=tagged) on the same port. PVID 1 for a port means that incoming untagged frames are assigned to VLAN 1  and outgoing frames, assigned to VLAN1 inside the switch, are sent untagged. And this contradicts setting VID 1 tagged for the port.

I would suggest, that you select an unused VLAN, let's say 100, for use as PVID (=native VLAN) for any trunk port. Given that, the configuration should look like:

DSR250, Port 2:
EGS 2110p, Ports 1,2,8:
1. and 2. EAP 9550 WAP, Ethernet Port:
PVID=100, VID 1 (tagged), VID 2 (tagged), VID 100 (untagged)

EGS 2110p, Ports 3-6:
PVID=1, VID 1 (untagged)

Another (more simple) choice consists of avoiding the dummy VLAN 100 by using VLAN 1 untagged (hence itself being the native VLAN for the trunk port, which is consistent with the setting PVID=1) instead:

DSR250, Port 2:
EGS 2110p, Ports 1,2,8:
1. and 2. EAP 9550 WAP, Ethernet Port:
PVID=1, VID 1 (untagged), VID 2 (tagged)

EGS 2110p, Ports 3-6:
PVID=1, VID 1 (untagged)

PT

[Rogue Leader]

So port 2 (where the PoE is plugged into) can't be set to PVID 100, if you set it to Trunk it doesn't offer that setting and if I select general if I try and set VID 100 it won't let me do it because it doesn't exist.  VLAN 1 and the main router share the same numbering scheme (192.168.1.xxx).  Also there is no way to set the first VLAN as untagged, it requires a number.

[FurryNutz]

Any status on this? 

[Rogue Leader]

Yes please, I'm still not sure what to do the last instructions didn't seem to work or maybe I didn't understand them

[FurryNutz]

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email.
Let us know how it goes please.