Welcome to TP-LINK Tech Support Forum
+ Reply to Thread
Results 1 to 1 of 1
  1. #1

    How to configure Multiple SSIDs work with Multiple VLANs based on EAP products

    Suitable for: EAP Products

    In enterprise network, we usually need to divide the network into different VLANs to isolate broadcast domain, suppressing the bad influence of broadcast traffic on network’s performance. The enterprise network is usually divided by different apartments, such as R&D, Marketing, and Product, etc. While nowadays since the wireless devices (like smartphone and laptop) are being used more and more frequently in office, the IT department has to configure each VLAN with the different wireless network (SSID) to meet these office needs. In this document, we will give you a simple step-by-step guide to this kind of configuration by use of TP-Link SMB router/switch and EAP/EAP Controller solution.

    Included devices:
    AP: EAP Products, such as EAP225
    SMB Switch: L2+or L3 Switches, such as T2600-28TS
    SMB Router: Multi-net NAT Available Routers, such as TL-ER6120

    Name:  1.jpg
Views: 0
Size:  35.9 KB

    Step1. Configure Multi-Nets NAT and Static Route on the Gateway Router

    (1)Multi-Nets NAT Configuration:
    Since there are multiple subnets requiring NAT service, the gateway which works as a NAT device needs to support Multi-Nets NAT. In gateway router’s Web UI, you can configure it in Advanced -> NAT -> Multi-Nets NAT as the figure shows below.
    Configure the IP and subnet mask of each subnet, and each item works for one subnet. Leave Interface as LAN.
    Name:  2.jpg
Views: 0
Size:  83.9 KB

    (2)Static Route configuration
    In Advanced -> Routing -> Static Route, you can configure the static route items, the static route configuration helps the data packet from WAN find the next hop, the L3 switch. So in this part, the Destination is the subnet’s network address, and Next Hop is the switch’s IP, and Interface is still LAN.
    Name:  3.jpg
Views: 0
Size:  88.0 KB

    Now the configuration on the gateway router is done, next we will configure the switch.

    Step2. Configure VLAN and Port Attribute on Switch

    (1)Port Attribute Configuration:
    In VLAN -> 802.1q VLAN -> Port Config, set the ports connected to EAP as Trunk mode (Port 1/0/10 and 1/0/12 in this topology). The port in Trunk mode can transmit data packets with different VLAN tags. Set PVID as 1.
    Name:  4.jpg
Views: 0
Size:  92.9 KB

    (2)VLAN Configuration
    In VLAN -> 802.1q VLAN -> VLAN Config, add the ports connecting the switch and EAP to VLAN, here we take VLAN 10 and VLAN 20 as examples.VLAN10 and VLAN20 both have member ports 1/0/10 and 1/0/12
    Name:  5.jpg
Views: 0
Size:  92.8 KB

    Configure L3 Interface and DHCP Server for VLAN on Switch.

    (1)VLAN’s L3 Interface Configuration:
    In Routing -> Interface -> Interface Config, add L3 interface for the VLAN configured in previous steps. So VLAN can communicate like a normal subnet on IP Layer. IP Address Mode usually is selected as Static. IP Address and Subnet Mask specify the default gateway and network size for the subnet.
    Name:  6.jpg
Views: 0
Size:  98.6 KB

    (2)DHCP Server Configuration for each subnet:
    After configuring L3 interface for VLAN, we also need to set up DHCP Server for each subnet to assign IP for the wireless clients. In Routing -> DHCP Server -> Pool Setting, you can configure IP address pool for each subnet. Network Address and Subnet Mask specify the size of the address pool. Default Gateway specifies the default gateway for the subnet to which the address pool is bound. The DNS server specifies the corresponding DNS server. These configurations will be sent to the clients during DHCP process.
    Name:  7.jpg
Views: 0
Size:  86.2 KB

    Note: The DHCP Server is disabled by default, so after configuring the DHCP address pool, please don’t forget to enable the DHCP Server. Or your wireless devices connected to the SSID can’t obtain an IP address.
    Name:  12.jpg
Views: 0
Size:  87.5 KB

    Step4. Static Route Item Configuration on Switch

    In Routing -> Static Routing -> IPv4 Static Routing Config, you can add the static route items like the following figure shows. The purpose of this static route item is to forward all the data packets received by the switch to the front gateway router successfully. So the Destination IP means any data packets with any destination IP will be forwarded to (the gateway router).
    Name:  13.jpg
Views: 0
Size:  85.8 KB

    Then the configuration on the gateway router is also done, and next we will configure the EAP Controller.

    Step5. Configure SSID items with VLAN ID on EAP Controller

    Run EAP Controller and after successfully Adopt EAP, add new SSID in Setting -> Wireless Settings. Add the previously configured VLAN ID in the Wireless VLAN ID section.
    Name:  14.jpg
Views: 0
Size:  44.7 KB

    Configure two SSIDs, name them as VLAN10 and VLAN20. Use the terminal device to connect the two SSIDs and we can see the IP addresses assigned to the terminal device are and And the terminal can access the Internet which means the configuration has been successful.
    Last edited by tplink_smb; 07-18-2017 at 01:46.


Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Copyright © 1996-2018 TP-LINK Technologies Co., Ltd. All rights reserved.