the Select button next to Port list to select the interface LAN-1.
Info |
---|
The VLAN ID 1 is assigned to the company network. |
Image Modified Image Modified 1.13) Create a new entry and change the following parameters: - VLAN name: Enter a descriptive name for the VLAN (in this example GUEST).
- VLAN ID: Enter the VLAN ID 2.
- Port list: Select the locial interface LAN-1.
Image Modified 1.14) The Network table has to appear as follows afterwards: Image Modified 1.15) Go to the menu Port table. Image Modified 1.16) Select the VLAN port LAN-1: Local area network 1 and click Edit. Image Modified 1.17) Change the following parameters: - VLAN tagging mode: Make sure that the tagging mode Hybrid (Mixed) is selected.
- Port VLAN ID: Make sure that the VLAN ID 1 is used.
Image Modified 1.18) Go to the menu IPv4 → General → IP networks to add the VLAN IDs to the networks. Image Modified 1.19) Select the network INTRANET and click Edit. Image Modified 1.20) Enter the VLAN-ID 1 since it belongs to the company network (INTRANET). Image Modified 1.21) Edit the network GUEST and change the following parameters: - VLAN ID: Enter the VLAN ID 2.
- Interface tag: Enter an Interface tag unequal 0, so that the communication between the network GUEST and the network INTRANET is prevented (in this example the tag 1 is used).
Info |
---|
Networks that have been given an interface tag can only communicate with networks that share the same interface tag. This also means that the network INTRANET , which has the interface tag 0, is able to communicate with all networks , whatever interface tag they have. This makes it easier to access the guest network from the company network . It is not possible to communicate from the guest network to the company network . |
Image Modified 1.22) The table IP networks has to appear as follows afterwards: Image Modified 1.23) The network and VLAN configuration is complete. Write the configuration back into the router.
2) Configuring the Public Spot and the RADIUS server on the gateway router 2.1) Go to the menu Public-Spot → Authentication and select the mode Authenticate with name and password. Image Modified 2.2) Go to the menu Public Spot → Server → Operational settings. Image Modified 2.3) Go to the menu Interfaces. Image Modified 2.4) Select the Interface for the Public Spot authentication (in this example the interface LAN-1), and click Edit. Image Modified 2.5) Activate the User Authentication for the interface LAN-1: Local area network 1. Image Modified 2.6) Go to the menu Network table to specify which VLAN ID should be used in conjunction with the Public Spot. Image Modified 2.7) Click Add to create a new entry. Image Modified 2.8) Select the VLAN ID 2. Image Modified 2.9) Go to the menu Public Spot → Users → RADIUS server to point to the integrated RADIUS server. Image Modified 2.10) Ex factory there is an entry named LOCAL. It points to the integrated RADIUS and Accounting server.
Info |
---|
If the entry LOCAL doesn't exist, create an entry and enter any name. |
Make sure that the following parameters are used: - Auth. server address: 127.0.0.1
- Auth. server port: 1812
- Acc. server address: 127.0.0.1
- Acc. server port: 1813
Image Modified 2.11) Go to the menu Public Spot → Wizard → Public Spot SSIDs. Image Modified 2.12) Create a new entry and change the following parameters: |