Setting up a VLAN

[tatami]

I have a network of Apple Airports on which I’d like to enable a guest network. I’ve found an article that says that AirPorts funnel all the guest network traffic to VLAN 1003. So I need to configure my Bipac 8800NL with a VLAN 1003.

From what I can make out, I do this under Configuration/LAN/Interface Grouping. So far I have enabled Groups isolation and clicked on the Add button. That brings me to this screen.

http://forum.billion.uk.com/download/fi ... 1db352f5d1

I'm guessing that I click on the left-pointing arrow to add the single listed WAN interface and that will give the grouping Internet access.

I'm looking for help in determining:

• What the Available LAN interfaces refer to and which one to add (seems I have to add at least one) to give the guest network access to the Internet and, if possible, to my network printer but not to the other Macs on my network.

• How to find the DHCP Vendor IDs for my Apple Airports.

• How to name the grouping VLAN 1003 (VLAN 1003 produces a "name invalid" message).

I'd really appreciate any advice here.

Thanks.

Philip

[tatami]

Well, this is disappointing. I was hoping there would be someone on this forum who would be able to help here. No takers?

[billion_fan]

Well, this is disappointing. I was hoping there would be someone on this forum who would be able to help here. No takers?

The router only supports port based VLAN not tagged based VLAN.

So you can only isolate a port from the other ports. If you want to isolate your airports from the routers wifi/LAN ports, setup a 'Interface Grouping' and create a new group to isolate the port your Airport connects to as the WAN link

example below for isolating a guest wifi network

Example for a guest wifi network (it is the same for the LAN port isolation, just need to create a new rule)

1. Click on Interface Grouping
2. Click on 'Add'
3. Enter a 'Group Name' eg guest
4. Under 'Available LAN Interfaces' select your 'Guest Network' and click on the arrow pointing left, so the guest wifi network should now be added to 'Grouped LAN Interfaces'
5. Click on 'Apply'
6. Under 'Group Isolation' tick the box and click on 'Apply'
7. Click on 'LAN >> Ethernet'
8. Under 'Group Name' select your guest wifi group for this example I used 'guest'
9. Tick 'LAN Side Firewall' and click on 'Apply' (with this option enabled anyone connected to the guest wifi network, will not be able to access the routers web gui, they can only access the internet)

[tatami]

Thanks for your advice, billion_fan. I've had a go at following it but I get stuck when choosing an "Available LAN interface". I can't add a guest interface grouping without choosing at least one of these. Which should I select? I'm nervous to experiment in case I make a wrong move and get into deep water!

Thanks again and best wishes

Philip

[billion_fan]

Thanks for your advice, billion_fan. I've had a go at following it but I get stuck when choosing an "Available LAN interface". I can't add a guest interface grouping without choosing at least one of these. Which should I select? I'm nervous to experiment in case I make a wrong move and get into deep water!

Thanks again and best wishes

Philip

Select the LAN port your Airport is connected to, so this port will isolated from all other ports on the router