This doesn't seem to work for me?Ģ- did you use pvid for vlan 10 and 30 and plug orbi into that port? I was going to try this next. So my question is how did you configure the switch to allow the vlan traffic to get through the access point?ġ- did you set up orbi as an approved mac address to for vlan 10 and 30.
VLAN 30 - is IoT and those I have to enter the Mac addresses for. wifi devices have their mac address associated with the VLAN tag. I think it is my switch setup for the access point and If you could further explain your setup for the access point that would help me.
My problem is replicating your setup as the packets don't seem to get to the IOT device through the access point. My ultimate goal is isolating IOT via MAC and the consumer grade mesh systems do not support vlan over ssid as you point out. Here is how you enter the mac address association with the VLAN tag Here are the VLANs as represented in pfSense Switch port 1 is the trunk to the pfsense box. The Orbi (in access point mode) comes into switch port 8. I don't bother entering Mac addresses for this VLAN I just let the PVID assign them. VLAN 20 - is general WiFi (guest and others). Wired devices pickup the PVID tag but wifi devices have their mac address associated with the VLAN tag. VLAN 10 - is trusted devices (not my wife and kids who don't care about security or privacy :-). But it is a good way to tackle this problem without having to go to higher-end pro wifi gear. It's a bit more admin because you have to take time to enter the mac addresses of the devices you want associated with specific VLANs. Instead I got a Netgear smart pro switch capable of mac-based VLAN tagging. That's usually how wifi VLANs are tagged. I didn't want to replace my Netgear Orbi mesh system (which works GREAT) with a pro-level wifi access point. I wanted to setup some VLANs to segregate my trusted devices from general wifi, IOT and WiFi AV (appleTVs, etc).
Hoping this is helpful to those of you looking to implement a VLAN scheme in your home networks without the benefit of a WiFi access point with proper VLAN tagging.
0 kommentar(er)
