Internet Access Not Available on WAP Guest Network

[alexdlaird]

Hello,

We have the RV180W router and the WAP321 access point in our business. We want to broadcast two SSIDs from both locations: the office SSID, which shares routing to LAN traffic, and a guest SSID.

The office computers are attached via ethernet to a switch off of LAN port 1 on the router. The AP is attached to LAN port 2 on the router.

On the router, the office SSID and the LAN are members of VLAN 1. The guest network is a member of VLAN 2. From the router, everything works just fine.

On the WAP, the staff SSID works fine, but the guest SSID has no internet. Both the office and guest networks get DHCP successfully from the router.

Our VLAN membership table in the router and WAP are attached, as well as other configuration details.

Why would we not be getting internet on the guest ID only on the WAP? Thanks for your help!

[jonatrod]

Hi Alex, Thank you for using our forum, my name is Johnnatan I am part of the Small business Support community. I noticed in your second picture, the router DNS is the same as your gateway, in this case I advise you to put it Dynamic, but if you want to set it as Static you can connect any PC directly to your ISP modem, Run CMD and type nslookup, this command will give you your correct DNS, then you can set static your DNS, in the router. Let me know if this work for you.

I hope you find this answer useful,

*Please mark the question as Answered or rate it so other users can benefit from it"

Greetings,

Johnnatan Rodriguez Miranda.

Cisco Network Support Engineer.

[alexdlaird]

My apologies, that image was mislabeled. That was the AP configuration, which is using the router for DNS information. The router is then pointing to OpenDNS for its DNS information.

[jonatrod]

Hi Alex, well in this case I you can select excluded in Port 2 Vlan 1 in order to assign Untagged to Port 2 Vlan 2, also you can check this document regarding clustering it could help you with your configuration.

http://www6.nohold.net/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=2871

In this document you will see how to set a bridge. If you have a question just let me know

I hope you find this answer useful,

*Please mark the question as Answered or rate it so other users can benefit from it"

Greetings,

Johnnatan Rodriguez Miranda.

Cisco Network Support Engineer.

[alexdlaird]

I'm not sure I fully understand how this would work. I want users from the AP, who are logged onto the staff wireless network, to be able to access to the LAN from the router (for instance, office printers are on the LAN). If I "exlude" port 2 from VLAN 1, why does this not block access to the office ethernet network?

[jonatrod]

Hi Alex, I am sorry, I recreated your case in a Lab and I resolved the issue about the Internet access using the same DNS in the Router and WAP, so I advise you to change it and use the same DNS in both, also if you want to restrict the access from the Guest to the Staff Vlan you just need to Isolate the Vlan as you did it. If you still having issues with the Internet connection you can check the firewall polices to verify if there is any rule denying the access.

I hope you find this answer useful,

*Please mark the question as Answered or rate it so other users can benefit from it"

Greetings,

Johnnatan Rodriguez Miranda.

Cisco Network Support Engineer.

[alexdlaird]

Applying specific DNS configurations for VLAN2 and on the AP does not resolve the issue either.

Here's a bit more clarification.

From the router:

• Staff network works just fine (IP in subnet 192.168.1.1 is given, internet can be accessed)
• Guest network works just fine (IP in subnet 192.168.2.1 is given, internet can be accessed)

From the AP:

• Staff network works just fine (IP in subnet 192.168.1.1 is given, internet can be accessed)
• Guest network can be accessed with limited connectivity (IP in subnet 192.168.2.1 is given, internet cannot be accessed)

The guest network from the AP is the only oddball. The only thing I can think that seems different is the subnets. For the staff network, we specify that the gateway, DHCP server, and DNS server are all 192.168.1.1, the router. But the guest network, tied to VLAN2, is in the subnet 192.168.2.1. From the router, you can specify that VLAN1 looks at the staff subnet and VLAN2 looks at the guest subnet, but I don't see a way to do this in the AP, it just has the place for one of each of those to be specified (per screenshot ap-ipv4.png).

[alexdlaird]

The issue apparently has something to do with what I suggested above, because changing the IPV4 settings for the AP to DHCP rather than statically assigning the gateway, DHCP, and DNS values partially resolves this issue. However, this is still a lingering issue. Internet is still intermittent if you are on a mobile device and roam between the AP and the router. Roaming from the AP to the router works just fine, but when you then walk back to the side of the building with the AP and the device roams back to the AP, the internet connection is lost (though you are still connected to the internet). Chrome reports that there was a "network change error", however both the AP and the router have the same wireless configuration. Would mixed-mode B/G/N play into this, or what else would cause the internet to be intermittent like this?

[jonatrod]

Hi Alex, here is my advice, you can try different combinations in order to find the correct configuration, between channels or bands in order to reduce the interference, and this link is going to help you with some Tips to improve your connection. https://supportforums.cisco.com/docs/DOC-29821

I hope you find this answer useful,

*Please mark the question as Answered or rate it so other users can benefit from it"

Greetings,

Johnnatan Rodriguez Miranda.

Cisco Network Support Engineer.