How can I create a RV340 VLAN that isolate wireless devices from the LAN devices?

[swu2019]

Previously I used RV082 that has vlan ids for each port. I could specify a different vlan2 to separate the port from all other ports that were associated with vlan1. All wired computers were connected to port1-port7 via switches or directly connected to the router. All wireless routers were connected to a switch that connected to port8 of the router. 

RV340 seems very different from RV0xx.

How can I achive this on RV340?

Thank you for any help.

[luis_cordova]

Hi @swu2019 ,

Check this link, maybe can help you:

https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb5479-configure-a-virtual-local-area-network-vlan-settings-on-an-r.html

Remember to mark the correct answers as solved, since that helps other users with similar doubts.

Regards

[Jaderson Pessoa]

Hello,

You will need two dhcp scope for it, like;

vlan lan: 192.168.1.0/24
vlaan wireless: 192.168.2.0/24

set ip address as default gateway:
vlan lan: 192.168.1.1/24
vlan wireless: 192.168.2.1/24

create two vlan on your RV340
Go to tab page: lan > vlan settins > create two vlans
vlan 10(lan): ip address 192.168.1.1
vlan 20(wirelesS): ip address 192.168.2.1

Now, just associate it each vlan for specific port that you need.

[swu2019]

Hi Jaderson,

Thank you for your input. I don't know how to associate a port to a vlan.

Should I specify untagged to the belonging vlan and exclude to another vlan?

I am confused about those terms. We don't have any vlan aware switches.

Regards,

Shangwu

[Jaderson Pessoa]

Hello,

Below a simple screen that can help you.

Select vlan x port and change configuration from tagged to untagged apply configurations and test your new config.

For exemple, 

port 1 will be a device like DESKTOP > vlan 10 untagged and others vlan can be excluded.

port 2 will be a device like SWITCH > vlan 1  untagged and others vlan must be tagged   (but on this switch you will need set his port as trunk).

[swu2019]

I tried the following two options.
port1 port2
1. vlan1 untagged tagged
2. vlan2 tagged untagged

or
1. vlan1 untagged exclude
2. vlan2 tagged untagged

Both of them cause the computer on port2 no internet connection.
Thanks any way.

[Jaderson Pessoa]

WE can do it step by step.

on port 2, input it on vlan 2 as untagged. Through desktop or laptop, ping on gateway of this network and post result here.

Please.

[swu2019]

After I restarted the wireless router on vlan2, devices on vlan2 can connect to internet now. But it still can ping devices on the vlan1 even though I set port2 as exclude from vlan1. Any idea?

[Jaderson Pessoa · Accepted solution]

Now, you need create a access rule on your RV340.

Access Rule Configuration

Step 1. Log in to the web configuration utility, and choose Firewall>Access Rules. The Access Rules page opens:

Create a rule with actione is DENY

rule_1

action = deny

service = all

source = vlan 1

destionation = vlan 2

time = aways

rule_2

action = deny

service = all

source = vlan 2

destionation = vlan 1

time = aways

check it if your have any doubts: https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb4286-access-rules-configuration-on-rv320-and-rv325-vpn-routers.html

[swu2019]

That works. Thank you for help.

[Jaderson Pessoa]

Great,

good lucky in your next steps.

[papamanuel]

I just had to configure an isolated VLAN, applied them rules and boom job done :)    

Thank you for the info :)