Welcome to TP-LINK Tech Support Forum
+ Reply to Thread
Page 1 of 3 1 2 3 LastLast
Results 1 to 15 of 77

Hybrid View

  1. #1

    CPE210 Configuration

    Model :

    Hardware Version :

    Firmware Version :

    ISP : [/COLOR]

    I want a wifi access point for Airbnb users on my property - a guest user network. The TP-Link unit (CPE210) is wired and is around 50 feet from the modem and router.
    I would like the guest network to be different from my personal network. Currently personal is 192.168.1.x and would like the guest network to be, for instance, 192.168.2.x.
    Is this something the cpe210 can do or do i need to set up a second router and connect the cpe210 to it?
    any help or suggestions appreciated.

  2. #2
    Quote Originally Posted by cayvman View Post
    Is this something the cpe210 can do or do i need to set up a second router and connect the cpe210 to it?
    Yes, the CPE210 supports multiple SSIDs and VLANs. But you need either a VLAN-capable switch or a VLAN setup in your router to use the Multi-SSID feature of the CPE210. See http://www.tp-link.com/at/faq-755.html for Multi-SSID setup.

  3. #3
    Quote Originally Posted by R1D2 View Post
    Yes, the CPE210 supports multiple SSIDs and VLANs. But you need either a VLAN-capable switch or a VLAN setup in your router to use the Multi-SSID feature of the CPE210. See http://www.tp-link.com/at/faq-755.html for Multi-SSID setup.
    I have a linksys wrt1200ac router. So, if I'm understanding the directions correctly, I must first set up a VLAN on the router than attach the cpe210's poe to that (VLAN) port. Correct?

  4. #4
    Quote Originally Posted by cayvman View Post
    I have a linksys wrt1200ac router. So, if I'm understanding the directions correctly, I must first set up a VLAN on the router than attach the cpe210's poe to that (VLAN) port. Correct?
    Almost correct. I don't know the WRT1200 (my last Linksys was WRT160), but if you are running OpenWRT, you can easily create two VLANs, assign a VLAN trunk (tagged) port and connect the CPE's LAN port (not PoE port) of the power injector to the WRT1200's trunk port. This way, the WRT1200 will direct traffic on each of the two VLANs into two distinct networks. Using the firewall you isolate both networks from each other.
    Last edited by R1D2; 04-05-2017 at 00:15.

  5. #5
    Quote Originally Posted by R1D2 View Post
    Almost correct. I don't know the WRT1200 (my last Linksys was WRT160), but if you are running OpenWRT, you can easily create two VLANs, assign a VLAN trunk (tagged) port and connect the CPE's LAN port (not PoE port) of the power injector to the WRT1200's trunk port. This way, the WRT1200 will direct traffic on each of the two VLANs into two distinct networks. Using the firewall you isolate both networks from each other.
    Is OpenWRT different from DD-WRT, which I have on the WRT1200. With dd-wrt the firmware has vap not vlan and don't think i have it configured correctly. Have separate networks but for some reason the cpe is connecting to the main network (192.168.1.x) and not the guest network (192.168.2.x).

  6. #6
    Quote Originally Posted by cayvman View Post
    Is OpenWRT different from DD-WRT, which I have on the WRT1200. With dd-wrt the firmware has vap not vlan and don't think i have it configured correctly. Have separate networks but for some reason the cpe is connecting to the main network (192.168.1.x) and not the guest network (192.168.2.x).
    Not much different: DD-WRT is basically just a customized OpenWRT, which might be better suited for end-users.

    Of course DD-WRT has VLANs: http://www.dd-wrt.com/wiki/index.php/VLAN_Support

    VAPs (Virtual Access Points) are multiple wireless network interfaces, which need a VLAN to be bridged to. See the introductory note on: https://www.dd-wrt.com/wiki/index.php/Multiple_WLANs

    You need to enable the CPE's Multi-SSID feature in order to assign a VLAN to an SSID even if you only use one SSID (guest network). Select the VLAN ID which is assigned to the DD-WRT's guest network and mark the switch's port the CPE is connected to as a tagged port in DD-WRT.
    Last edited by R1D2; 04-06-2017 at 15:16.

  7. #7

  8. #8
    Thank you both. Will post my results.

  9. #9
    Beware of AP router mode: it will expose your personal network to the guest network if connected to the same router/modem.

  10. #10
    Quote Originally Posted by R1D2 View Post
    Beware of AP router mode: it will expose your personal network to the guest network if connected to the same router/modem.
    Which is exactly what I don't want to happen.

  11. #11
    Thank you both,will post results.

  12. #12
    I can think of the KISS principle (https://en.wikipedia.org/wiki/KISS_principle).

    Why don't you just hook it up via an ethernet cable in AP router mode, enable the DHCP server and create a separate subnetwork of .2.100 - .2.199, set the gateway to the IP of the router (EWAN), leave VLANs completely out of the game and in the wireless settings choose a WPA2-AES pass and enable AP isolation...wouldn't that lead to such a result as the one you' re after?

    But then again R1D2 seems to suggest that there's a danger there, as "Beware of AP router mode: it will expose your personal network to the guest network if connected to the same router/modem.". However in enabling AP isolation via the router (CPE) how is this still possible?
    Last edited by RTouris; 04-06-2017 at 20:38.

  13. #13
    20 hours later, give or take a few, I believe I've finally been able to dedicate a port with a separate ssid and ip address on the wrt54gs. Will know for sure later this evening early morning as I can't muck with the network just now as the missus is watching something on the tube that requires internet. Will update when i'm able to test.

    If it works, the trick will be how to accomplish the same (dedicating a port) with the wrtac1200 router, which I'd prefer to use, newer and a couple of bells and whistles I'd like to be able to use.
    Last edited by cayvman; 04-07-2017 at 03:50. Reason: more input

  14. #14
    Success.Able to dedicate Port 4 of the WRT54 (configured with a separate ssid) and have the CPE plugged into that port. All is working great, thanks to you R1D2. Now, if I can get the WRTAC1200 configured with a dedicated port, that would be ideal.
    Here's a screen shot of the dd-wrt firmware showing what I have to work with.

    Name:  screenshot1.jpg
Views: 0
Size:  71.7 KB

    Question is if I telnet the router and send the following command nvram set vlan3ports="3" how should I complete the following command: nvram set vlan3hwname=?. Should it be br1 or ath1.1?

    If you have any thoughts would appreciate it.

    Thanks again for getting me this far.
    Last edited by cayvman; 04-07-2017 at 17:45.

  15. #15
    Quote Originally Posted by cayvman View Post
    Question is if I telnet the router and send the following command nvram set vlan3ports="3" how should I complete the following command: nvram set vlan3hwname=?. Should it be br1 or ath1.1?
    Glad it works for you. If you are using a bridge, you should set the hwname to br1. But what do you want to achieve with a bridge with only one interface assigned? It should also work with ath1.1 if you don't assign it to a bridge interface. To be honest, I didn't use DD-WRT at all and with OpenWRT NVRAM is gone even on WRT54 since long time (it uses config files instead). So, if in doubt, please ask in the DD-WRT forum to be sure. The DD-WRT wiki talks about et0 for the WRT54's switch ports, but it might be outdated already or a typo, since you have eth1 instead.


 

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Copyright 1996-2017 TP-LINK Technologies Co., Ltd. All rights reserved.