This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to assign a VLAN LAN IP to a VLAN WLAN subnet?

Patric Beuthen over 8 years ago

Dear All

in order to build a mDNS/Bonjour gateway, I have configured a RaspberryPi with 4 VLAN interfaces:

eth0.110 with 10.10.110.20
eth0.130 with 10.10.130.20
eth0.210 with 10.10.210.20
eth0.230 with 10.10.230.20

The VLANs are defined in XG while
- 110 & 130 are LAN VLANs
- 210 & 230 are WLAN VLANs

I have attached the RaspberryPi eth0 to a layer 2 switch port in trunk mode.

When I attach my MacBook to the LAN VLANs 110 & 130, I can ping the LAN IP addresses in the same VLAN. But I when attach my MacBook to the WLAN VLANs 210 & 230, I cannot ping the WLAN IP addresses in the same VLAN.

Is such a setup possible in general? Do I need to configure a unicast route in XG?

If so, how do I do that? I cannot find an answer in the documentation: Let’s say, I want to define the route from WLAN 10.10.210.* to the LAN IP 10.10.210.20.
Destination IP/Netmask: 10.10.210.20 (is net mask 0 or 1?)
Gateway: hmm, I just want to use the "cable attached to Port1" but non of the gateways seem to make sense.
Interface: Port1 (with Port1.<VLAN> points to the switch but of course in XG only LAN VLANs are configured here)
Distance: default is 0

Do I somehow need to tell XG that it shall NOT route requests to the same IP address to the WLAN?

Thank you, Patric

This thread was automatically locked due to age.

0 B.R.O. over 8 years ago

maybe set up zone for vlan and another zone for wlan then set firewall rules to allow traffic to flow like lan to lan rule...
Cancel
Vote Up 0 Vote Down

Cancel
0 Patric Beuthen over 8 years ago in reply to B.R.O.

that would make the whole setup less secure since the MacBooks shall authenticate via certificate/RADIUS in a secure network with access to sensitive NAS systems via NFS etc. The AirPlay devices do not support such a level of security...

Besides, it probably wouldn't help me as the MacBooks are usually connected to the WLAN (and they have iTunes with the music - although it's mounted) and the AirPlay devices are rather attached to the LAN

But thanks for thinking about it!
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago

Patric,

can you give more details of your current configuration?

Who is providing Wireless AP function? XG AP? External AP?

A small network diagram will help us.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Patric Beuthen over 8 years ago in reply to lferrara

God morning Luk

I attach 2 diagrams. The first to describe the network in general and the second how the RaspberriPi is attached. The WLANs are provided by Sophos AG and AP15.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Patric Beuthen

Thanks Patric for the Diagram.

Can you check if the Client Isolation is enabled under Wireless Networks > Advanced, on your Sophos AP?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Patric Beuthen over 8 years ago in reply to lferrara

disabled for both wireless networks

To me, it is a complete mystery how XG could possibly know that a single IP address, which belongs to the IP range of a WLAN, is attached to some switch via LAN.
Cancel
Vote Up 0 Vote Down

Cancel