VLANs on the CF-EW72

I initially wanted to use this device as a dumb AP. I wanted to pass over four VLANs to the AP to be used as SSIDs. There is no need for DHCP or firewall on the AP since that is handled on the router. I created four VLAN interfaces (MGMT, VPN, CLRNET, and Guest). When the AP is fired up, I would like it to pull its IP address from my MGMT VLAN (which I have set up on the router), and make the other SSID visible from the AP.

So how do I make the VLANs visible as SSID on AP?

Have you already setup the VLANs on your main router and proven to be working?
Is this dumb AP running OpenWrt?

if so, please post your config files and we can provide guidance:

Please copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

cat /etc/config/network
cat /etc/config/wireless
1 Like

Prior to trying to get the CF-EW72 working, I was using a TL-Link EAP225 running down to my pfSense device. Granted I was using the stock firmware on the EAP225, but was able to create SSID which were attached to the VLAN interfaces that are on the pfSense router. Then the EAP225 died which brought me to the CF-EW72.

I thought I could create new devices (802.1q), add the VLAN Tag, device name and then create interfaces, plug my connect my cable from the LAN side to my switch, reboot and watch the unicorns and rainbows arrive and see of all of my SSID viewable and life if groovy! Of course, this has not happened for me. In theory, I thought when I rebooted, the CF would pull an IP address from the MGMT VLAN (static 192.168.10.10), and the other VLANs (SSID) would be accessible and visible.

Every time I reboot the CF-EW72, I find myself doing a factory reboot, because I am not able to access the AP at 192.168.10.10 or able to see wireless SSID for me to associate to. So first off, so I change the address to dhcp and see if I can access to the AP before even trying to mess around with the VLANs?

Yes, this should be possible, but it obviously requires a bit of care to make sure you have things configured properly.

Let's start here and then worry about the rest... it is probably best to start with a factory reset configuration and we'll get this interface working first. Only after this is proven to be configured properly will we move on to the other VLANs and wifi configurations.

You have 2 options: set an actual static IP on the device, or use the DHCP reservations on pfSense to assign this address to the CF. If you're trying to use the latter, have you verified that you have the correct MAC address (for the CF) setup with the DHCP reservation in the pfSense?

Thanks for following up on this issue. Prior to seeing you message, I was able to create VLANs on the device and more or less it works. My first SSID (Which is still called OpenWRT) pulled it IP address from my MGMT VLAN on my pfSense router. I will pulling my hair that I could not access the internet until I realized that I had inadvertently pulled the plug from the pfsense router to the modem. Once plugged, life was groovy and I am now connected through the access point and now writing this message! (Yah!!!)

There is a couple of issues. Although I can get a address from my pfsense DHCP, and the access point is getting an address, I am not able to access the luci interface. If I attempt to ping the address or arp ping, I get a time out. Regardless, the AP provides internet connection and I am able to access other servers on my LAN. I cannot ssh either, so I am as a loss.

On the other VLAN SSID, I am able to connect to the SSID and it does provide my clients connected to the SSID IP addresses from the pfsense DHCP server, but although I am able to connect to machines on the LAN, it will not connect to the internet. Nothing has changed on the pfSense device, and considering that like the MGMT VLAN (which the OpenWRT SSID) works, I am wondering that is failing, but I will look closer at the pfSense side and see if something.

I would like to not have to factory reset and start this over, especially considering that I going to be snowing in a couple of days and I want to get the AP up on the roof before then!

Follow-up: For some reason, I was able to get access to LUCI and I noticed a couple of things: I noticed that when I was looking at the network, I noticed a difference between my "MASTER" SSID (OpenWRT) and "CLRNET"

This is the Master (which although I can't access the web interface or ssh into), which work somewhat correctly.


The network is set as lan

On the other hand, the CLRNET allows me to connect to servers on the LAN, but will not connect to the internet. Also, I am able to access the luci interface and ssh into the device. I set the network to the CLRNET vlan

Let's see the configuration in text form...

Please copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/firewall
cat /etc/config/dchp
1 Like