Wi-Fi devices appear to be isolated (but they shouldn't be)

Hi,

I am having a week or weirdness and this one is the latest.  I've inherited a pre-configured DrayTek solution that consists of the following:

DrayTek 2866ax
AP903 (x3)
AP912C

There are two WLANs, one is the main office and the other is a guest (for extra detail the guest network is only broadcast on two of the APs).  There are 2 VLANs configured, VLAN0 is the default VLAN and this services the office LAN and the both the office WiFi and Guest network.  The second VLAN1 is port based and connects to another switch that is just wired connections.

The WLANs are broadcast on both 2.4 and 5Ghz with the same SSID/password.

When connected to the office WiFi the devices get an IP address etc and can browse the internet but they can't access any of the network devices i.e. printers.  By this I mean they can't see the printer is online and more importantly can't ping the printers.

I've checked the isolate member settings for the office Wi-Fi on all the APs and router and in each case its disabled, strangely the isolate member setting isn't setup for the guest network (not sure if the previous IT supply just didn't set this up).  However if I try and switch this on I get this warning message:

"Different SSID with the same name but different "Isolate Member" settings detected! Still proceed?"

I can't find anything on the setting of any of the APs/router that have different settings applied so I'm baffled what is prompting this message.

Any thoughts on this gratefully received.

Rob



 

You say that you only have 1 VLAN "serving both the Office and Guest networks". How is that possible? I appreciate you have inherited this system but why wasn't it set up with a separate Guest VLAN?

https://www.draytek.co.uk/support/guides/kb-wireless-guestnetwork

Yup, all on the same LAN (all connected to an unmanaged switch .... fun eh!). I'll sort that out once I get the odd isolation stuff sorted.

I should have said "Why" is this possible not "How" 🤣Clearly it is possible but seems to be a lazy way of doing it. That message is puzzling, what is "Different" about the SSID if it has the same name, different password? Presumably you are not seeing this "dark SSID" in the settings? Are the various APs in a mesh or stand alone out of interest?  Is there anything in the router or devices Access Control settings?