Re: Cannot Get WAP321 Guest-VLAN to see internet

krazykaigh · ‎09-07-2012

Hi All, and thanks in advance for any and all support I can get on this issue.

My company has an RV180W Router, a SGE-2000 Managed Switch, and a WAP321 Wireless Access Point. I have about 12 users on a Windows 2003 Server Standard, completely updated. My Win box is my DHCP Server.

Now I am running two VLANS, Vlan 1 (default) the main vlan is where the Win box is on. Vlan 5 (guest Vlan) uses the RV180W as the DHCP server.

Vlan1 is 192.168.1.1-254 - Issued by Win box

Vlan5 is 192.168.2.100-254 - Issued by RV180W

Now Vlan 5 is strictly wireless, it is used solely to let guests access the internet while waiting.

So I have RV180 setup with this vlan membership:

VLAN Membership Table

VLAN ID	Description	Inter VLAN Routing	Device Management	Port 1	Port 2	Port 3	Port 4
1	Default	Disabled	Enabled	Untagged	Untagged	Untagged	Untagged
5	SCLO_Guest	Disabled	Enabled	Excluded	Excluded	Excluded	Tagged

Multiple VLAN Subnets

Multiple VLAN Subnet Table

VLAN ID	IP Address	Subnet Mask	DHCP Mode	DNS Proxy Status
1	192.168.1.1	255.255.255.0	None	Enabled
5	192.168.2.1	255.255.255.0	DHCP Server	Enabled

Now my WAP 321 has these settings:

Networks


VAP No.	Enable	VLAN ID	SSID Name	SSID Broadcast	Security	MAC Filter	Channel Isolation
0
					Show Details
1

However, when I log into VLAN5, I can find the AP and connect to with no problems. But as soon as I use ANY browser to see the internet, I get:

"The server at blah blah can't be found, becuase the DNS lookup failed...."

Now when I run ipconfig on the connecting wireless computer, it shows:

IPv4 Addres : 192.168.1.112

Subnet Mask: 255.255.255.0

Def. Gate: 192.168.1.1

So somehow the RV180W is not issuing 192.168.2.x addresses.

Any suggestions?

I was told that maybe making the RV180W handle all the DHCP services would solve problem.

Is there a way to make the Win box handle both DHCP services but not let VLAN5 see any of the network, only go to the internet?

Thanks, hope this helps other SMB Network Admins,per se.

Also, if I move my DHCP server to RV180W, will how bad could it screw up network connections? Especially services like Kaspersky? How risky is it and how do I backup my Win DHCP settings?

THAT'S ENOUGH... wow!

Kaigh Taylor

Tom Watts · ‎09-07-2012

Hi Kaigh, looking at the screen shot, there is no vlan 5 assigned to any of the SSID.

-Tom
Please rate helpful posts

-Tom Please mark answered for helpful posts http://blogs.cisco.com/smallbusiness/

krazykaigh · ‎09-07-2012

Thomas,

Thanks for the quick response.

I think because I did not have the WAP 321 in edit mode the numbers are near invisible. I added a screen shot.

Now, I did think it was necessary to add this information:

My Router connects to internet and on the inside connects from Port 1 to the SGE-2000 Port 1. The WAP 321 is hard wired to Port 4 on the Router. The WAP does not go through the switch at all.

My switch only uses VLAN1, but I think it could possible be the missing link in solving the VLAN DHCP problem. Any suggestions?

I am wondering about hard wiring RV180W Port 4 to some port on the Switch, with help setting that port on the switch to VLAN5 then connecting the WAP321 to some port on switch and setting it to VLAN 5.

But I don't see how that would help resolve the addressing issue.

ALSO, when I wirelessly connect to LegalWiFi, VLAN1, I can see my entire network and connect to the internet. So the WAP is allowing VLAN1 to pass through properly.

Kaigh

krazykaigh · ‎09-08-2012

SOLVED:

Because my WAP321 has a static ip address, I had to manually add the DNS servers. Under the IPv4 Settings, when you set your ip and subnet mask and default gateway, there is a radio button that looks like you have a choice to enter the DNS servers. YOU DON'T. When you statically add the ip you must add the DNS as well.

I know that only makes sense, but it is easy to overlook too.

Kaigh