I have a very interesting use case which I think should work but in testing I am getting some odd results. What I want to do is use Drop-in mode to give a customer use of their existing firewall while segmenting off VoIP traffic to go directly to a peplink. I am testing with a MAX BR1 Mini as its what I have available with drop-in mode but would probably use a different device for production. What I keep running into is that the Voice vlan has no internet access while the DROP-IN wan is active. If I unplug the WAN and do cellular failover then traffic out of of the ‘local’ voice vlan works. The post at Drop-In-Mode suggests that I should be able to use WAN1 from ‘local’ networks even if its in drop-in mode. I am curious if the issue could be related to using VLANs instead of a different physical port but I don’t want to purchase another device on a hunch.
Welcome to the Peplink forum community! Drop-in mode was first introduced with Peplink Balance routers, typically using multiple WAN interfaces. The VLAN feature (with a drop-in mode configuration) was added for increased functionality.
The BR1 can also be configured for a drop-in mode deployment now. There is a current limitation however as the VLAN does not get a NAT when going out the drop-in mode WAN.
Engineering is working on solving this for future firmware releases.
Is the limitation specific to the BR1 or do all Peplink routers have this limitation? If its just the BR series I will be happy to get a different version for testing but I did not want to do that without confirming that what I want to do is possible.
This is with all devices. Please note however, it is still possible for VLAN networks to go out the other WANs. Stay tuned as there will be beta firmware to test with here.
Thank you for that. If we used a separate physical port that was untagged would it still apply since VLAN tagging isn’t in effect or would it still be affected by the limitation?
The issue is not because of VLAN tagging, but instead the private (VLAN) network does not get a NAT if it goes out the drop-in mode WAN. This is needed for routing to the public IPs on the internet.