I am attempting to recover the set up of a VLAN. The VLAN is for guest wireless traffic to go through our main switches and out to an ADSL router but I am running into some difficulties.
We have 3 Unifi AP-AC model access points. Each access point has a physical network connection to 1 out of 4 Dell 6248 switches which are currently in a single managed stack like so.
AP 1 -> Switch 1 Port 40
AP 2 -> Switch 2 Port 36
AP 3 -> Switch 3 Port 17
The managed stack and AP's are currently using the 192.168.1.0/24 on VLAN 1 - Default and I have created a VLAN 10 - Guest.
The APs have two SSID WLANs, "corporate" which is also on the 192.168.1.0/24 range and a "guest" which is on 192.168.99.0/24. I have set the "guest" to tag its traffic with VLAN 10 and no DHCP is set.
I have set the 3 ports above as General Mode, Allowing Any frames and in VLAN - 1 these are untagged and VLAN - 10 they are tagged.
I have also set a Zyxell Router with a static address of 192.168.99.254 into Switch 4 Port 24 and set this to Access mode for VLAN 10.
The router is set to provide DHCP for the 192.168.99.0/24 range.
Now when I connect a laptop to our "coporate" WLAN, everything works fine. I receive an DHCP address from our server and I can reach everything as normal.
When I connect to the "guest" WLAN, I do not receive a DHCP address additionally I am able to ping equipment on the VLAN 1 subnet which I thought would not be possible.
Can someone take a look at this config and let me know what is wrong with it?
!Current Configuration:
!System Description "PowerConnect 6248P, 3.3.12.1, VxWorks 6.5"
!System Software Version 3.3.12.1
!Cut-through mode is configured as disabled
!
configure
vlan database
vlan 10
vlan routing 10 1
vlan association subnet 192.168.99.0 255.255.255.0 10
exit
sntp unicast client enable
sntp server 192.168.1.18
stack
member 1 5
member 2 5
member 3 5
member 4 5
exit
switch 1 priority 12
ip address 192.168.1.212 255.255.255.0
ip default-gateway 192.168.1.227
ip domain-name my.domain
ip name-server 192.168.1.18
ip name-server 192.168.1.19
ip name-server 192.168.140.2
ip routing
ip route 192.168.99.0 255.255.255.0 192.168.99.254
interface vlan 10
name "Guest"
routing
ip address 192.168.99.212 255.255.255.0
bandwidth 10000
ip helper-address 192.168.99.254 dhcp
ip mtu 1500
exit
username "admin" password a8e64cdc85228f4c837da747958ffd74 level 15 encrypted
dhcp l2relay
dhcp l2relay vlan 2,10
!
interface ethernet 1/g7
channel-group 2 mode auto
exit
!
interface ethernet 1/g8
channel-group 1 mode auto
exit
!
interface ethernet 1/g40
switchport mode general
switchport general allowed vlan add 10 tagged
exit
!
interface ethernet 2/g36
switchport mode general
switchport general allowed vlan add 10 tagged
exit
!
interface ethernet 3/g2
channel-group 2 mode auto
exit
!
interface ethernet 3/g17
switchport mode general
switchport general allowed vlan add 10 tagged
exit
!
interface ethernet 3/g48
channel-group 1 mode auto
exit
!
interface ethernet 4/g24
switchport access vlan 10
exit
exit