• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

couple Vlan Questions

H

Hades12

Limp Gawd
Joined
Feb 23, 2005
Messages
291
I am working on doing a wireless setup at our church. In each location I need a Guest and a worker connection. The Guest is for Internet usage only, and worker will get to the printers that are in a main office. There will be 5 to 8 AP's and Likley they will be Engenius EAP300 Each unit has 4 SSID's That can map to a vlan.

Here is where I am unsure of where to go. Do I need a Switch like this netgear Or do I need a router with Vlan support?
Does each AP need to go on a seperate port of the switch? or can two AP's go on one port. The Printers and server will be in a room and will be wired. Internet is given by an AT&T DSL Modem.
 
You are going to need a device that can do Layer 3 routing such as a layer 3 switch or a router.
 
for very basic Layer 3 have a a look at the Cisco 1841 router. You will still need a VLAN capable switch but it can be a Layer 2 switch as the 1841 will do the Layer 3.
 
Most POE netgear switches support the type of routing you need, even if the switch is only layer 2.
 
The manual on the Ubiquiti website says the POE injector comes with them. Do they not?
 
/usr/home said:
They do yes. But if you want to use a POE switch you need to use the special adapters.
Click to expand...
Unless you go with the Pro OR AC models which support 802.3af and 802.3at respectively. They are quite a bit more expensive though.
 
Ubiquiti uses a 24v POE mode for their first generation UniFi stuff versus the industry standard 48v as Vegaman mentioned. Thus the need for the adapters. Or, check out Amazon for 24v POE multi-unit injector blocks (Yes, these are 10/100, but that's all the 1st Gen UniFi operate at). I've used a bunch of them on Unifi installs rather than a bunch of the factory injector blocks or the added cost of POE in the switch plus adapters at $20-25/ea. That is unless you'll need POE for any other gear, like IPCams, etc.

The big thing that you'll need is a switch that can support VLANs (i.e. Layer 2) as well as a router that can support them as well. Your generic home-grade Linksys/Netgear/etc will not. You mentioned Guest mode on the UniFi system. This will allow you to create a VLAN to isolate traffic from an SSID (Guest mode) and route it either directly to the internet and/or make some internal resources available. That routing and security being done within the router. OP, what sort of switches and Router/Gateway are in place at present?

You also mentioned Unifi's Guest mode. Great concept as long as you'll NEVER need access to any internal resources of any kind. It accomplishes this task by firewalling off the internal network within the AP, so the only valid path of travel is out the default gateway. This method does not have any exceptions, only "blocked" networks. When I say internal resources, I mean any guest fileshares, any internal email server, etc.
 
As an Amazon Associate, HardForum may earn from qualifying purchases.
Nate7311 said:
Ubiquiti uses a 24v POE mode for their first generation UniFi stuff versus the industry standard 48v as Vegaman mentioned. Thus the need for the adapters. Or, check out Amazon for 24v POE multi-unit injector blocks (Yes, these are 10/100, but that's all the 1st Gen UniFi operate at). I've used a bunch of them on Unifi installs rather than a bunch of the factory injector blocks or the added cost of POE in the switch plus adapters at $20-25/ea. That is unless you'll need POE for any other gear, like IPCams, etc.

The big thing that you'll need is a switch that can support VLANs (i.e. Layer 2) as well as a router that can support them as well. Your generic home-grade Linksys/Netgear/etc will not. You mentioned Guest mode on the UniFi system. This will allow you to create a VLAN to isolate traffic from an SSID (Guest mode) and route it either directly to the internet and/or make some internal resources available. That routing and security being done within the router. OP, what sort of switches and Router/Gateway are in place at present?

You also mentioned Unifi's Guest mode. Great concept as long as you'll NEVER need access to any internal resources of any kind. It accomplishes this task by firewalling off the internal network within the AP, so the only valid path of travel is out the default gateway. This method does not have any exceptions, only "blocked" networks. When I say internal resources, I mean any guest fileshares, any internal email server, etc.
Click to expand...


That is a very cool peice of equipment. Thanks for pointing it out.

Right now there is two Dumb switchs and the ISP Modem/router.

The guest accounts will never need internal resources.
 
As an Amazon Associate, HardForum may earn from qualifying purchases.
Hades12 said:
That is a very cool peice of equipment. Thanks for pointing it out.

Right now there is two Dumb switchs and the ISP Modem/router.

The guest accounts will never need internal resources.
Click to expand...

Then you are safe (for now) using the built in guest access and skip separation via VLANs. Given limited bandwidth via DSL, I'd make sure you also setup bandwidth limitations via the guest mode as well. That being said, I'd make plans to acquire a proper gateway with VLAN support and L2 switches as well.
 
Nate7311 said:
Then you are safe (for now) using the built in guest access and skip separation via VLANs. Given limited bandwidth via DSL, I'd make sure you also setup bandwidth limitations via the guest mode as well. That being said, I'd make plans to acquire a proper gateway with VLAN support and L2 switches as well.
Click to expand...

I've had great results with Mikrotik and Unifi. I limit bandwidth via QOS at the router. Say only one person is on, why not let them use the full speed but if you get more I have it set to evenly divide the bandwidth amongst users using queues. Works very slick. You can do VLAN routing on the Mikrotiks as well.
 
You must log in or register to reply here.
Back
Top