Jump to content

Recommended Posts

Posted

Hi All,

 

Recently I’ve setup different VLANs on my network and would like to split internal and guest WLANs to two different VLANs.

 

Ruckus ZoneDirector 3000 with ZoneFlex 7363 APs. Layer 3 switch does my routing, I’ve setup VLANs on my switches with correct gateway and IP Helper (I can connect to different VLANs and get an IP address from DHCP server and access the Internet). I would like to use VLAN 20 for internal laptops and VLAN 30 for guests. But I am having a lot of problems and hope that someone can point me in the right direction.

 

I have tried different settings combinations but my Zonedirector just cannot see any of my APs.

 

Quick configuration overview:

 

Three VLANs – 10 (PCS), 20 (Internal Wireless), 30 (Guest Wireless).

 

On the controller:

 

Configure – System – Set an IP address for Zonedirector on VLAN 10 with correct Gateway and DNS, Access VLAN 1 (if I set an IP from VLAN 20 and/or set Access VLAN to anything apart from VLAN 1 – Zonedirector becomes inaccessible), port on the switch that Zonedirector connected to is set to VLAN 10.

 

Configure – WLANs -2 WLANs. Internal set NO to Isolate traffic, Access VLAN 20. Guest set NO to Isolate traffic, Access VLAN 30.

 

Configure – Access Points – All of previously (connected before I’ve set up VLANs) connected APs are showing. Access Point Group – just one group with all APs. In Port Setting option – set LAN3 connection to “Trunk Port” with Untag ID set to 1.

Monitor – Access Points- All Access Points show as Disconnected.

 

Ports on the switch that APs connected to are set to Trunk, with VLAN 1 – Untagged; VLAN 10, 20 and 30 – Trunk.

 

I would really appreciate if someone can point me in the right direction. Thanks.

Posted

I don't think you should be trunking the ports the APs are connected to, try leaving it untagged.

 

Personally I'd be isolating traffic for the guest network.

Posted
Hi, so you have your ZD in vlan 10, is this port tagged or untagged? I would make sure this port is untagged in vlan 10, AP's you have these in vlan 1? again is this tagged or untagged? i would usally put the AP management vlan as untagges and the SSID vlans as tagged on the AP ports, as you have the AP's in a different vlan than the ZD i would also create a DNS A record for the ZD as zonedirector.FQDN > ZD IP ADDRESS.
  • Thanks 1
Posted

Hi, thanks for your reply.

The ZD connected to the switch, port set as Access, untagged VLAN 10. The APs are connected to the switch as Trunk with VLAN 1 untagged, VLAN 10, 20 and 30 - tagged. I have set the DNS record on the server but I'll double check it.

Posted
Hi, so you have your ZD in vlan 10, is this port tagged or untagged? I would make sure this port is untagged in vlan 10, AP's you have these in vlan 1? again is this tagged or untagged? i would usally put the AP management vlan as untagges and the SSID vlans as tagged on the AP ports, as you have the AP's in a different vlan than the ZD i would also create a DNS A record for the ZD as zonedirector.FQDN > ZD IP ADDRESS.

 

This is more or less like I did this a few years back for a DIY ruckus deployment . Management untagged on the port for the access point, all other vlans/ssids tagged. HP MSM I've seen setup in the same way with management untagged and the vlans for the SSIDs tagged.

Posted
This is more or less like I did this a few years back for a DIY ruckus deployment . Management untagged on the port for the access point, all other vlans/ssids tagged. HP MSM I've seen setup in the same way with management untagged and the vlans for the SSIDs tagged.

 

This is the way it setup, so why my ZD cannot see any APs? I am really confused.

Posted
did you change the vlan tag within the ZD for the Managment? or did you leave it to the default vlan?

 

Sorry, where is that? Is it in Configure - System - Device IP Settings - Access VLAN? It set for VLAN 1, as if I change to anything different (say VLAN 10) ZD just disappear from the network and I have to reset Access VLAN to 1 using CLI.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...