Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[whosername]

I cannot get Multiple SSID and VLAN to work on the DAP2695.
This used to be easy on the DWL-2100 and DWL-3200...

What I want:
Internal network VLAN1 > SSID1
Guest network VLAN10 > Primary SSID
Both VLANS are tagged on the switch-port that the DAP-2695 is connected to (switch is DGS-1224T).
An external DHCP server will issue 192.168.1.x on VLAN1 and 192.168.10.x on VLAN10.

What I did on the DAP-2695:
VLAN1 tagged on LAN1, LAN2, Mgmt
VLAN10 tagged on LAN1, LAN2, Mgmt
VLAN1 untagged on SSID-1
VLAN10 untagged on Primary SSID
All other S-x and W-x set to Not Member on both VLANs. PVID disabled

What happens:
- nothing works on Primary SSID
- VLAN1 works on SSID 1

I have a feeling that the only reason VLAN1 works ON SSID 1 may be because it happens to be the default VLAN, not because I specifically connected VLAN1 to SSID 1.

I also tried switching around so that VLAN1 would be Primary SSID and VLAN10 would be SSID 1, but it made no difference.

I have tried many variations and I experience the problems reported before:
http://forums.dlink.com/index.php?topic=59442.0
http://forums.dlink.com/index.php?topic=58951.0

Yet I cannot get it to work, despite some people reporting they got their setup to work.

Hope someone can shed light on this mystery.

[FurryNutz]

Link>Welcome!

• What Hardware version is your DAP? Look at sticker under DAP.
• Link>What Firmware version is currently loaded? Found on the DAPs web page under status.
• What region are you located?

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email.
Let us know how it goes please.

[whosername]

Hardware version: A1
Firmware version: 1.01
Located in the Nordics (Sweden, Norway, ...)
I will try D-link support here as well.

[FurryNutz]

Let us know how it goes please.

[whosername]

The short answer: You have to also use the PVID settings for this to work.

After i started this thread I reversed the order of the VID - SSID combinations: I shouldn't matter, but just in case this was what I tried that did not work then:

VLAN1 tagged on LAN1, LAN2, Mgmt
VLAN10 tagged on LAN1, LAN2, Mgmt
VLAN1 untagged on Primary SSID
VLAN10 untagged on SSID-1
All other S-x and W-x set to Not Member on both VLANs. PVID disable

D-Link support answered the following:

"in the PVID Settings tab, add vid 10 to MSSID port S-1 on both 2.4 and 5"

Notice I had stated in the original posting that I had disabled PVID. That was a not entirely correct. I thought it was disabled, however the setting I was reffering to is "PVID Auto Assign Status" and that was by default disabled.

So I still left that setting disabled, but I specifically had to set the PVID on relevant SSIDs to get it to work. So now it works.

I have configured a lot of d-link switches (where tag, untag and not member of VIDs are the settings I use on any given port) and PVID is not something I have ever needed. In comparison to the D-link DWL-2100 AP this has changed. That was basically a single table with SSID X = VLAN Y, very easy to set up.

I'm sure there's a good reason why D-link has changed this, but I am not sure why. Perhaps someone can enlighte me.

[FurryNutz]

Thanks for sharing the information. Hope this helps others. 

[LT.Data]

Good info, but....
I am working with Cisco SmallBusiness SG500 and some older SGE2000 managed switches.  I have configured the DAP-2695s (I have 4 of them at this point) with the Primary SSID as VLAN 100 (my primary VLAN) and the Multi-SSID-1 as VLAN 207.  I have tried about every combination (including those in this thread) with no success.  If anyone else has made this flavor of config work, how did you program the ports on your switch.  I have tried every combo on that too.  My brain is jello and most of my hair has fallen out over this.  I know the 207 VLAN works, because I have several random brand wifi routers and access points working.  They are connected to ports configures as "Access" VLAN ports with a PVID of 207.  I wanted to implement the DAP-2695s so that I could allow access to VLANs 100 and 207 with a single AP in each location.
Any recommendations would be welcome.

[FurryNutz]

Link>Welcome!

• What Hardware version is your DAP? Look at the sticker under the DAP.
• Link>What Firmware version is currently loaded? Found on the DAPs web page under status.
• What region are you located?

I'll see if I can get some information and help for this...

Good info, but....
I am working with Cisco SmallBusiness SG500 and some older SGE2000 managed switches.  I have configured the DAP-2695s (I have 4 of them at this point) with the Primary SSID as VLAN 100 (my primary VLAN) and the Multi-SSID-1 as VLAN 207.  I have tried about every combination (including those in this thread) with no success.  If anyone else has made this flavor of config work, how did you program the ports on your switch.  I have tried every combo on that too.  My brain is jello and most of my hair has fallen out over this.  I know the 207 VLAN works, because I have several random brand wifi routers and access points working.  They are connected to ports configures as "Access" VLAN ports with a PVID of 207.  I wanted to implement the DAP-2695s so that I could allow access to VLANs 100 and 207 with a single AP in each location.
Any recommendations would be welcome.

[PacketTracer]

... how did you program the ports on your switch.

interface gix/y/z
  switchport mode trunk
  switchport trunk allowed vlan add 100,207

[LT.Data]

Thanks for the quick responses.

... "What Hardware version is your DAP? Look at the sticker under the DAP."

My units are all hardware version A1 updated to firmware v1.11.
My region is the SouthEast (Georgia).


... "interface gix/y/z
  switchport mode trunk
  switchport trunk allowed vlan add 100,207"

This is my current switchport setting. 

After another evening of troubleshooting, I've determined that DHCP traffic accross these units is my issue.  With a static IP address, attached units work fine.  My primary VLAN (100) uses a Microsoft server for DHCP.  On the secondary VLAN (207) uses my WatchGuard firewall for DHCP.  Was going to next attempt a different DHCP server on the 207 VLAN.

[PacketTracer]

You could use your Cisco switch for DHCP server function. Given you have IP networks 192.168.100.0/24 and 192.168.207.0/24 in use for your VLANs 100 and 207 respectively, you could define 2 DHCP pools 192.168.100.11-254 and 192.168.207.11-254 and two SVI (one for each VLAN where the DHCP server listens for requests) as follows (adapt my example values to your real values):


ip dhcp server
!
ip dhcp excluded-address 192.168.100.0 192.168.100.10
ip dhcp excluded-address 192.168.100.255
ip dhcp excluded-address 192.168.207.0 192.168.207.10
ip dhcp excluded-address 192.168.207.255
!
ip dhcp pool network IPV4-POOL-VLAN100
 address 192.168.100.0 255.255.255.0
 default-router 192.168.100.1
 dns-server 192.168.100.1
 domain-name mydomain.local
 lease 0 24
!
ip dhcp pool network IPV4-POOL-VLAN207
 address 192.168.207.0 255.255.255.0
 default-router 192.168.207.1
 dns-server 192.168.207.1
 domain-name mydomain.local
 lease 0 24
!
interface vlan 100
 description SVI to VLAN 100
 ip address 192.168.100.2 255.255.255.0
!
interface vlan 207
 description SVI to VLAN 207
 ip address 192.168.207.2 255.255.255.0


For further details see Cisco's Reference guides for your switch model.

[LT.Data]

Thanks whosername for the config info.

I used a decommissioned Microsoft server to be the DHCP server on the 207 VLAN.  That solved the DHCP issues, but pointed out others. 
Fortunately for y'all they are no longer D-Link related.  My remaining issues are with my WatchGuard M300 firewall, which I will take up with them.

Thanks for all the information.

[FurryNutz]

Hope it will continue to work out.

Thank you PT for the help. Awesomeness.