Netgear WNDAP330 Reference Manual
Contents
1. NETGEAR Connect with Innovation Layer 2 Layer 3 switches and multi SSID multi VLAN network with traffic separation This document describes the steps to undertake in configuring a Layer 2 Layer 3 switch in this document a FMS7382S with firmware 7 3 1 7 and a WNDAP330 to host a multi SSID and multi VLAN network The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs configured from any other VLAN which will exist on the Wired or Wireless LAN The diagram below shows a typical scenario 3 Mn as AN 3 X WNDAP330 Management VLAN 1 Management IP 192 168 0 235 SSID VLAN VLAN ID 2 Open system None SSID VLAN VLAN ID 3 Open system None LAN to 1 0 6 LAYER2 LAYER3 SWITCH VLAN1 Management IP 192 168 0 254 Port 1 0 1 1 0 6 1 0 7 1 0 28 Untagged VLAN 2 Ports 1 0 2 1 0 3 PVID 2 Untagged 1 0 6 Tagged VLAN 3 Ports 1 0 4 1 0 5 PVID 3 Untagged 1 0 6 Tagged DGFV338 LAN to 1 0 2 DGFV338 LAN IP 10 0 0 1 24 DHCP 10 0 0 0 24 Corporate LAN Internet Version 1 0 Table of Contents NE VO A ETOUR eeren n E EE E E E E 3 ALEE E T o E E A EE E E E E 3 LOC Al S SUD e E E E E E 3 LAYER2 LAYER3 SWITCH CONFIGURATION ssessssesessesresssersssresserrsssrressrressrress 4 Create a new VLAN 0 cece ccccccccessscccessseceessseccessseceessseccessseceessseceessseceessseceesseeeeeaaees 4 Assign Port s membership to2. 1 0 5 PVID 3 Untagged 1 0 6 Tagged Version 1 0 LAYER2 LAYER3 SWITCH CONFIGURATION Create a new VLAN NETGEAR Connect with Innovation o Basic VLAN Configuration VLAN Configuration Reset gt Ad vance d Reset Configuration Fj LAN Configuration f rwo uean anae OOC EE E E Fii Default Default B VLAN2 Static 3 VLAN3 Static o Assign Port s membership to a VLAN NETGEAR Connect with Innovation System Switching Routing QoS Security Monitoring Maintenance Help Index o gt Basic VLAN Membership Advanced VLAN Configuration VLAN Membership VLAN Membership u Untag All VUAN Situs T VLANName VLANZ UNTAGGED PORT MEMBERS ae Port PVID Configuration E a E 2 VLAN Type TAGGED PORT MEMBERS Group Configuration Protocol Based VLAN Port 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 o Group Membership uj uU T GARP Switch 25 26 27 28 Configuration GARP Port Configuration o NETGEAR Connect with Innovation o Basic Port VLAN Id Configuration Advanced VLAN Configuration PVID Configuration VLAN Membership 1 all VLAN Status gt Port PVID Configuration aterata PVID 1 to Protocol Based VLAN 4093 Group Configuration Protocol Based Hee o Admit All Disable o Group Membership GARP Switch E Admit All Disable 0 Configuration Oo 1 0 3 2 Admit All Disable 0 e Admit all Disabl
3. Authentication Settings Network Authentication Open System v Data Encryption None v Wireless Client Security Separation O Yes No LAN ID 2 Select the management VLAN and Untagged VLAN Connect with Innovation Configuration Monitoring Maintenance Support IP Wireless Security Wireless Bridge REGIE General Advanced Spanning Tree Protocol General f gt Hotspot Spanning Tree Protocol O Enable Disable Syslog 802 1Q LAN Untagged LAN 1 Management LAN 1 amp Enable the Radio by default its turned on under 2 4GHz for the relevant wireless technology that will be used Select the proper Channel Click on Apply Access the Profile settings Page via Configuration Security Edit each profile one per VLAN and change the SSID name to be relevant i e VLAN2 VLANS Select the VLAN ID based on the VLAN which the SSID will associate to Click on Apply Note The Network authentication settings are optional Ensure the Untagged and Management VLAN are set correctly depending on the network requirement Note In our scenario VLAN 1 will be used for Management as our managing PC will be connected to a port in VLAN1 on the switch Version 1 0 FURTHER NOTES Testing Testing can be performed by connecting a Wireless client to each of the SSID alternatively i e VLAN2 VLANS and try to ping a device in the VLAN associate to such SSID Ensure the Wireles
4. a VLAN cccccsssssscceecccccesssssssseeeeceeeessesssseaaes 4 onango TG POP VID seene ear n E E E A A 4 SVS 1S CONO e E N 5 ACCESS POINT CONFIGURATION 1 0 0 cccccecceesseccessseeeessseecessseeeesseeeestseeens 6 Enable the Wireless Radio mode and configure the Radio Channel 6 Create a new SSID and assign a VLAN ID cccsseccesseeceesseeeeesseeeeeeees 6 select the management VLAN and Untagged VLAN ccccccccesseceeeseeeeeneees 6 FURTHER NOTE Sarerea rren EEEN sity EEEE NEEESE EEES 7 TOSUN ea A ces ee eeeceee cece eae 7 Managing CONICS Soi vas sacctcastaccteasescees annsseaemeeennraaacdueianssses ipasadaseceaucpnesiasdenieniaessecanetacees 7 Version 1 0 NETWORK SETUP Physical setup DGFV338 connected to port 1 0 2 on Layer2 Layer3 switch Corporate LAN connected to port 1 0 4 on Layer2 Layer3 switch WNDAP330 connected to port 1 0 6 on Layer2 Layer3 switch Logical setup DGFV338 LAN IP 10 0 0 1 24 DHCP 10 0 0 0 24 WNDAP330 Management VLAN 1 Untagged VLAN 1 LAN management IP 102 168 0 235 SSID VLAN2 VLAN ID 2 Network authentication Optional SSID VLAN3 VLAN ID 3 Network authentication Optional Layer2 Layer3 switch Model FSM7328S or any Layer2 Layer3 switch Firmware 7 3 1 7 or above VLAN1 Management IP 192 168 0 254 Ports 1 0 1 1 0 6 1 0 28 All ports untagged VLAN2 Ports 1 0 2 1 0 3 PVID 2 Untagged 1 0 6 Tagged VLAN3 Ports 1 0 4
5. e 0 Access the VLAN configuration via Switching VLAN Basic Input the VLANID VLAN name and select static as the VLAN type and click on Add Repeat the process for each VLAN that needs to be created The picture shows the summary after VLAN2 and VLAN3 have been created Access the VLAN Membership page via Switching VLAN Select the relevant VLAN ID and click on the little arrow symbol beside Unit 1 this will expand the menu showing the list of available ports Click on the gray area below each port until the relevant selection is set U Untagged T Tagged Gray No selection Click on Apply Note The picture shows the membership settings for VLAN2 as per our scenario Repeat the procedure for VLAN 3 and VLAN1 Access the Port PVID configuration page via Switching VLAN Set the PVID to the value for the relevant VLAN For example VLAN 3 PVID will be 3 Select the ports that will be assigned with the above PVID in our scenario ports 1 0 4 and 1 0 5 are in VLAN3 Click on Apply Version 1 0 Save the configuration NETGEAR Connect with Innovation System Switching Routing Security Monitoring Maintenance i Reset Upload Download File Management Troubleshooting Save Save All Applied Changes Configuration Save Configuration Saving all applied changes will cause all changes to configuration panels that were applied but not saved T to be saved
6. s client obtains an IP address from a DHCP server or hard code an IP address relevant to the VLAN the Wireless client will be connecting to In this scenario when connecting to VLAN2 the Wireless client should obtain the TCP IP settings from the DGFV338 DHCP server and be able to ping the DGFV338 LAN address if available the Wireless client should also be able to access the Internet Managing devices DGFV338 The unit will be managed via a device wired or wireless connected to VLAN2 only WNDAP330 The unit will be managed upon being configured from a device wired or wireless connected to a port in VLAN1 on the Layer2 Layer3 switch as VLAN 1 is the management VLAN for the Access Point Layer2 Layer3 switch The unit will be managed connecting to a port in VLAN1 as this is the management VLAN Version 1 0
7. thus retaining their new values across a O system reboot Access the Save Config page via Maintenance Tick the box appearing within the Save Configuration option Click on Apply Note Failing to Save the configuration will incur in a loss of all the changes made should the unit reboot Version 1 0 ACCESS POINT CONFIGURATION Enable the Wireless Radio mode and configure the Radio Channel NETGEAR Connect with Innovation Configuration Monitoring Maintenance Support System IP Security Wireless Bridge o Basit Wireless Settings pide Se Wireless Settings QoS Settings gt Advanced 802 11b bg ng 802 1lla na Wireless Mode 2 4GHz Band 11b 11bg 11ng Turn Radio On Q Wireless Network Name SSID VLAN2 Broadcast Wireless Network Name SSID Channel Frequency Data Rate Auto 1 2 412GHz 2 2 417GHz 3 2 422GHz2 4 2 427GH2 5 2 432GHz2 Output Power 7 2 442GHz2 8 2 447GHz 9 2 452GH2 10 2 457GHz 11 2 462GHz 12 2 467GHz 13 2 472GHz Create anew SSID and assign a VLAN ID NETGEAR Connect with Innovation Configuration Monitoring Maintenance Support System IP Wireless Wireless Bridge Profile Settings Edit Security Profile Advanced Profile Definition Profile Name NETGEAR e Wireless Network Name SSID VLAN2 Broadcast Wireless Network Name SSID yes Ono
Download Pdf Manuals
Related Search