Yet another question about VLAN w/ RT-AX88U Pro in AP mode.

[mbze430]

I own a RT-AX88U Pro and recently update the firmware and wanted to use the VLAN feature. Normally with any SMB AP product, it is a slam dunk easy config. But I am not sure about these ASUS consumer APs.

Here is the topology of my network (simplified)

Questions:

1) In AP mode, under the LAN tab I can set an IP for it. All my management is in VLAN 254. So my question is, can I set it as such? If not, I was thinking using a Trunk + Native Vlan... ie: set the trunk link as All Packet (or whatever the actual name is) on the AX88U Pro and then on the L2 switch set it for switchport mode trunk, and add 100,200,300 and then native vlan 254.... will that work? if it does here is my 2nd problem

2a) When setting up a main SSID... but there is no way to give it a VLAN (at least I haven't found a way) so I assume the main SSID will come out untagged. I couldn't find a way to tag the main ssid wifi. (I even tried to go into the Guest Network Pro tab to create the same SSID hoping it would "fool it". It just made another SSID with the same name with a different MAC address.

2b) or I would have to setup AX88U Pro LAN and Main SSID on VLAN 100 untagged so the L2 switch would be switchport mode trunk, add 200,300 and then native vlan 100....?

3) is there a secret way to make this all work in the CLI shell? Or I am just asking for trouble or what these AP can really do?

 

[Tech9]

Why don't you get a proper business class AP for your setup? This is a consumer router with perpetual beta firmware.

 

[coxhaus]

It looks like a basic setup. What layer3 switch are you using?

 

[mbze430]

I was able to get it to work. Used two cables, since the ASUS firmware won't allow you to assign a VLAN to the 'default' LAN/WIFI. Have to use one of the port to pass all/any traffic; passing LAN and main wifi. Then setup another port as Trunk and pass all tagged packets

simplified:
AX88ProU in AP mode
Build all the VLANs and than assigned them to the wifi
assigned port 1 and allow all (100)
assigned port 2 and trunk mode and allow all tagged (200 & 300)

opposite end
main vlan of your 'default' lan/wifi
the access port:
switchport
switchport mode access
switchport access vlan 100

the trunk port
switchport
switchport mode trunk
switchport mode allowed vlan 200,300

 

[mbze430]

I found a way to do it with single wire. But your switch needs to support PVID and/or General mode. Most Cisco switch support it, but not sure about the others.

Set the AX88Pro as All(Default). Create all your VLANs

On the switch that support PVID and/or General Mode.

console# sh run int gi 1/0/24
interface gigabitethernet1/0/24
no eee enable
no eee lldp enable
switchport mode general
switchport general allowed vlan add 200,300 tagged
switchport general allowed vlan add 100 untagged
switchport access vlan none
switchport general pvid 100
switchport trunk native vlan none
!

 

[coxhaus]

I found a way to do it with single wire. But your switch needs to support PVID and/or General mode. Most Cisco switch support it, but not sure about the others.

Set the AX88Pro as All(Default). Create all your VLANs

On the switch that support PVID and/or General Mode.

console# sh run int gi 1/0/24
interface gigabitethernet1/0/24
no eee enable
no eee lldp enable
switchport mode general
switchport general allowed vlan add 200,300 tagged
switchport general allowed vlan add 100 untagged
switchport access vlan none
switchport general pvid 100
switchport trunk native vlan none
!

This is all layer 2 stuff. Your original diagram has a layer 3 switch labeled on it. A VLAN is layer 2 until you assign a network IP. Once you assign a network then you need a router or layer 3 switch.

 

[mbze430]

Access points are extension of a VLAN, each SSID can belong to a different VLAN. The layer 3 switch ends up routing to each VLAN interface (SVI).

I never had issues with routing. I had issues trying to use the AX88U-Pro to extend my WLAN for more coverage.

@coxhaus if you knew about the single wire setup, you should have mentioned it weeks ago instead putting in comments that is not helpful at all.

 

[coxhaus]

Access points are extension of a VLAN, each SSID can belong to a different VLAN. The layer 3 switch ends up routing to each VLAN interface (SVI).

I never had issues with routing. I had issues trying to use the AX88U-Pro to extend my WLAN for more coverage.

@coxhaus if you knew about the single wire setup, you should have mentioned it weeks ago instead putting in comments that is not helpful at all.

That is true. I asked what layer 3 switch you were using?

 

[mbze430]

Celestica DX010 running Microsoft SONiC.