Welcome to TP-LINK Tech Support Forum
+ Reply to Thread
Results 1 to 1 of 1
  1. #1

    How to configure Multiple SSIDs with Multiple VLANs on CAP&AC products

    Apply to: CAP products

    In enterprise network, we usually need to divide the network into different VLANs to isolate broadcast domain. The enterprise network is usually divided by different apartments, such as R&D, Marketing, and Product, etc. While nowadays since the wireless devices (like smartphone and laptop, etc.) are being used more and more frequently in the office environment, the IT department has to configure each VLAN with the different wireless network (SSID) to meet these office needs. In this document, we will give a simple step-by-step guide to this kind of configuration based on TP-Link SMB router/switch and CAP/AC solution.


    Name:  1.jpg
Views: 0
Size:  35.1 KB

    Step1. Configure Multi-Nets NAT and Static Route on the Gateway Router

    (1)Multi-Nets NAT Configuration:
    Since there are multiple subnets requiring NAT service, the gateway which works as a NAT device needs to support Multi-Nets NAT. In gateway routerís Web UI, you can configure it in Advanced -> NAT -> Multi-Nets NAT as the figure shows below. Configure the IP and subnet mask of each subnet, and each item works for one subnet. Leave Interface as LAN.
    Name:  2.jpg
Views: 0
Size:  83.9 KB

    (2)Static Route configuration
    In Advanced -> Routing -> Static Route, you can configure the static route items, the static route configuration helps the data packet from WAN find the next hop, the L3 switch. So in this part, the Destination is the subnetís network address, and Next Hop is the switchís IP, and Interface is still LAN.
    Name:  3.jpg
Views: 0
Size:  88.0 KB

    Now the configuration on the gateway router is done, next we will configure the switch.

    Step2. Configure VLAN and Port Attribute on Switch

    (1)Port Attribute Configuration:
    In VLAN -> 802.1q VLAN -> Port Config, set the ports connected to CAP as Trunk mode (Port 1/0/37 and 1/0/39 in this topology). The port in Trunk mode can transmit data packets with different VLAN tags. Other ports remain as Access mode.
    Name:  4.jpg
Views: 0
Size:  88.6 KB

    Name:  5.jpg
Views: 0
Size:  89.3 KB

    (2)VLAN Configuration:
    In VLAN -> 802.1q VLAN -> VLAN Config, add VLAN items. You need to add the ports connecting switch and CAP to the VLAN associated with the SSID of CAP. Here we take VLAN100 and VLAN200 as examples, the member ports of VLAN100 and VLAN200 are 1/0/37 and 1/0/39.
    For Management VLAN (if you need Management VLAN in your network), here we take VLAN10 as an example, add port of AC (1/0/15), ports of CAP (1/0/37,1/0/39) and a port for manage PC (1/0/6) into VLAN10, and then set these ports PVID as 10. In this way we can make only the PC connected to the management port can access the AC and manage the wireless network.
    Name:  6.jpg
Views: 0
Size:  65.9 KB

    Step3. Configure L3 Interface and DHCP Server for VLAN on Switch

    (1)VLANís L3 Interface Configuration:
    In Routing -> Interface -> Interface Config, add L3 interface for the VLAN configured in previous steps. IP Address Mode usually is selected as Static. In IP Address and Subnet Mask, you can configure the IP address and the network size.
    Name:  7.jpg
Views: 0
Size:  98.6 KB

    (2)DHCP Server Configuration for each subnet:
    After configuring L3 interface for VLAN, we also need to set up DHCP Server for each subnet to assign IP for the wireless clients. In Routing -> DHCP Server -> Pool Setting, you can configure IP address pool for each subnet. Network Address and Subnet Mask indicate which subnet this pool works for and how large this pool is. Default Gateway is the gateway of this subnet, and DNS Server will give the DNS server for this subnet.
    Note: The switch doesnít support DNS proxy, so in the DNS server, you need to fill in the IP address of the gateway router or some public DNS Server address like
    Name:  c.jpg
Views: 0
Size:  86.2 KB

    Note: The DHCP Server is Disable by default, so after configuring the DHCP address pool, please donít forget to enable the DHCP Server. Or your wireless device connected to the SSID canít obtain an IP address. The switch is as below:
    Name:  9.jpg
Views: 0
Size:  87.5 KB

    Step4. Static Route Item Configuration on Switch
    In Routing -> Static Routing -> IPv4 Static Routing Config, you can add the static route items like the following figure shows. The purpose of this static route item is to make all the data packets to the switch forward to the gateway router successfully. So the Destination is, which means any data packets will be forwarded to (the gateway router).
    Name:  10.jpg
Views: 0
Size:  85.8 KB

    Then the configuration on the gateway router is also done, and next we will configure the AC.

    Step5. Configure SSID Items and Bing to VLAN

    First get the AC started up and manage all the CAPs successfully. Then in Wireless -> Wireless Service, you can add new SSID items.
    Name:  f.jpg
Views: 0
Size:  45.1 KB

    After adding SSID successfully, click Radio Binding to bind the SSID to a Radio. At the same time you can bind this SSID to a VLAN. In the following figure, for example, we bind SSID namedĒv100Ē to VLAN100.
    Name:  g.jpg
Views: 0
Size:  62.5 KB

    Step6. Configure DHCP Server on AC and address segment

    In Network -> Interface, you can configure the IP address in ACís default interface and subnet mask. Here we take as an example.
    Name:  h.jpg
Views: 0
Size:  44.7 KB

    In Network -> DHCP Server, you can configure DHCP Server on AC. Here we configure and make AC only assign IP for CAP, so in Global Settings we choose For AP Only. In DHCP Server List, there is a default DHCP Server. Its network address segment will automatically change along with the IP change in default Interface configuration. So usually this part doesnít need any other configuration.
    Name:  i.jpg
Views: 0
Size:  53.1 KB

    Here we configure 2 SSIDs for example, SSID v100 and SSID v200. We use a wireless device to connect to these two SSIDs, and you will see the wireless device get an IP address like (in SSID: v100) and (in SSID: v200). So all devices can access to Internet normally. If we use the management port to open the ACís Web management page, and in the Web UI we can see the AC has successfully managed the CAP with IP address in Now we can say the settings have come into effect.
    Last edited by tplink_smb; 07-18-2017 at 01:43.


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Copyright © 1996-2018 TP-LINK Technologies Co., Ltd. All rights reserved.