L320-agn R2 no management on Vlan

[N0nick]

Hello,

I'm dutch speaking and need to do every german post in google translate so if it's ok i will
ask my question in english.

I know a little about vlan's.
I have multiple HP switches with vlans connectect with trunk ports to my firewall.
I have a L320-agn R2 configured for vlan.
Everything worked, so every ssid get his own ip range but once i enable vlan on de 320
i cannot acces the AP anymore to change the settings.

A this moment i allow all intervlan on my firewall to be sure there is no blocking from the firewall.
So everytime i want to change something now i reset the AP en run the latest script, make the
changes en create a new script.
This works but it's not practice.
So how can i acces my AP once vlan is enabled, where is the mistake?

On my Hp i got port8 tagged on all the vlans
I connect my L320 to port 8
I have 6 vlan on this switches
Vlan 20 Devices
Vlan 30 Iot
Vlan 40 Domo
Vlan 50 Management
Vlan 100 Guest
Vlan 200 Cameras

This is my config export of my L320 (let all the security basic for testing)

(because the max allow char is 600000 i add it as a attachment)


Second question.
With my Aruba AP's i can change the band frequentie from 2.4 to 5Ghz depend on the different SSID's
I did not find a way to do this with the 320?

Kind regard
Gianni

[Dr.Einstein]

Here is your problem:

Code: Alles auswählen

cd /Setup/TCP-IP/Network-list 
del *
tab  Network-name      IP-Address       IP-Netmask       VLAN-ID  Interface           Src-check      Type      Rtg-tag  Comment                                                         
add  "INTRANET"        10.10.50.5       255.255.255.0    0        BRG-1               loose          Intranet  0        "local intranet"
add  "DMZ"             0.0.0.0          255.255.255.0    0        BRG-1               loose          DMZ       0        "demilitarized zone"
cd /

Change it into

Code: Alles auswählen

cd /Setup/TCP-IP/Network-list 
del *
tab  Network-name      IP-Address       IP-Netmask       VLAN-ID  Interface           Src-check      Type      Rtg-tag  Comment                                                         
add  "INTRANET"        10.10.50.5       255.255.255.0    50        BRG-1               loose          Intranet  0        "local intranet"
add  "DMZ"             0.0.0.0          255.255.255.0    0        BRG-1               loose          DMZ       0        "demilitarized zone"
cd /

And you have to enable the vlan module:

Code: Alles auswählen

set /Setup/VLAN/Operating Yes

The Lancom L320 has only one radio module. So you have to decide if you want to use 2.4 GHz or 5 Ghz. Both at the same time is not possible. Only with L322 or other access points.

Also check if WLAN-1-5 is part of BRG-1 if you wanna access the ap management over wifi.

[N0nick]

Here is your problem:

Thx i knew it was there somewhere but everytime i set vlan id 50 to the intranet i lost my connection because the vlan module was not enabled.
And because i lost the connection i was not able to enable the vlan module.
If i did the vlan module first then i could not acces the AP to switch the ID so i got a loop.

And you have to enable the vlan module:

Code: Alles auswählen

set /Setup/VLAN/Operating Yes

That was the lifesaver
I now just edit my config script and add these 2 (cd /) line to the botom of the script and add id 50 to intranet script
Now just reset my AP , load the script en bam i can reach my AP over my vlan.

Thx you i was trying for a few day's now how to enable this from the gui but i can do it like this so

[Dr.Einstein]

Newer LCOS versions have an option in 'extras' to separately activate the VLAN module for this problem.