Hi - I am using a 2862ac with latest firmware. I also have a AP903 connected by cat5 to 2862.

I use port VLAN's on the 2862.
Ports 1 to 3 are on network LAN 1 ips 192.168.1.1 and set to VLAN0 and SSID1 is assigned to this LAN too.
Port 4 is on LAN2 ips 192.168.2.1 and set to VLAN1 and SSID2 is assigned to this LAN too.

At the moment AP903 is connected via cat 5 to Port 3 on 2862 and LAN port A4 onn the 903.

So everything connected to 903 joins VLAN0.

I've just read 903 supports VLAN. I need to google more but may I ask.

If I set 2862 port 4 to be connected to VLAN0 and VLAN1 and config 903 VLAN's where Port A4 is part of LAN0 and LAN1, then set 903 Port A3 as LAN0 and Port A1 as LAN1 does this mean anything connected to 903 port A3 gets IP 192.168.1.x as assigned by 2862 router, and anything connected to 903 port A1 gets IP 192.168.2.x as assigned by 2862 router and they are securely separate?
Will this work?

I was thinking of getting another 903 and via cat 5 connecting to 2862 port 4 but if my question above would work I can do what I want with just the one AP903?

Hope this makes sense.

Thanks for any comments.

Update: my idea is not possible. 903 VLAN only refers to wireless clients not hard ethernet ports. Pity!
I should have readmanual before asking.

 

Hey there.
I can only really speak for the AP962s

But usually you would trunk multiple VLANS to the APs on the switch (as you suggest by selecting multiple vlans on the router/switch for the port the AP uses).

Then you'd set a specific VLAN on each SSID that you create.

That way you could get to management of the AP on, say, VLAN0. But the wireless network clients would be segregated and tagged on whatever other VLAN(s) you have on the trunk. You can disable DHCP on the AP and have your router handle it.

Hi munchin ,

If I set 2862 port 4 to be connected to VLAN0 and VLAN1 and config 903 VLAN's where Port A4 is part of LAN0 and LAN1, then set 903 Port A3 as LAN0 and Port A1 as LAN1 does this mean anything connected to 903 port A3 gets IP 192.168.1.x as assigned by 2862 router, and anything connected to 903 port A1 gets IP 192.168.2.x as assigned by 2862 router and they are securely separate?
Will this work?

No, because as you've added in your edit of your original post, you can't assign VLAN ID's to ports on the AP903, but the port can still pass-through VLAN ID'd traffic!

So if you set it up how you explained, and have VLAN tagging enabled on VLAN1, you will be able to receive that traffic on any of the other ports of the AP903 (Ports 1-3) as long as your device is VLAN capable, i.e. it can be set to look for the correct VLAN ID tag. For example, this could be a smart mini-switch that is VLAN capable which could then be setup to receive the VLAN traffic and forward it on, out of its other ports "untagged" if you so wish - for devices that aren't VLAN ID capable; all for a fraction of the price of another AP903. 

At the same time, you can assign VLAN1 to a spare SSID on the AP903 for wireless access to that VLAN. Further more, you could create a managment VLAN on the router and assign the AP903 management page to that management VLAN too!


VLAN-ing is great, if you can get your head around it.