Guest network on Surf SOHO

Product Discussion Pepwave AP & Surf
4

Essentially Layer 2 Isolation will not block MAC-Addresses/anything layer 2 related.
Guest Protect allows for blocking at Layer 3.

5

So, to sum up, the Surf SOHO can not create a WiFi network that gives clients Internet access but isolates them from all other LAN devices. True?

6

Perhaps the VLAN functionality can restrict users of one SSID such that they can’t see Ethernet connected devices on the LAN?

7

Hi Michael,

Below is the suggestion.

  1. Create new Vlan for guest. For example Vlan 2. Then disable Intervlan Routing for Vlan 2.

  2. Assign staff SSID to Untagged Vlan (default Vlan).

  3. Assign guest SSID to Vlan 2.

Hope this make sense.

1 Like
8

Finally, got around to testing this. I am a bit out of my league with VLANs and the Surf SOHO manual is no help. In a nutshell, my question is: does the new VLAN get assigned its own IP subnet? That is, if my existing LAN is 192.168.50.x, then should I use 10.10.10.x for the new VLAN? And, if so, then should I assign the router a new private IP address on the 10.10.10.x subnet? And, what is the “name” of LAN? Is it just a comment for my own use?

Thanks in advance.

9

Hi,

Please refer to the settings below:

  1. VLAN settings
  • Defining Guest VLAN & LAN

1026×555 41.8 KB

  • Details Guest VLAN setting

1042×603 42.8 KB

  • Details LAN setting

989×565 38.4 KB

  1. WIFI SSIDs setting
  • WIFI LAN SSID

1003×500 37.2 KB

  • WIFI Guest SSID

1002×546 39.8 KB

Thank you

2 Likes
10

Wow, thanks for taking the time to make the screenshots.
I see now that the network name is just a comment for my personal use and that the VLAN can (should? must?) use a different subnet and that the router does indeed get a different internal IP address on each VLAN/subnet.
Thank you.
Michael

11

I tried this and it works, so thanks again.
In the screen shot of the LAN configuration

I see that Inter-VLAN routing is enabled. Any particular reason for that, if the Guest VLAN has it off?

12

Hi Michael,

Inter-VLAN routing is to allow communication between the Vlans. If this was disabled at Guest Vlan, any communicates with Guest Vlan will be blocked.

1 Like
13

Hey all…

I’m not seeing the option to create additional vlan’s on my surf soho rev 2 firmware 6.2.1. Is this functionality available on the surf? My guest wireless clients still have L3 access to my wired devices (confirmed with nmap).

Regards,

JJ

14

Finally figured out to access the VLAN menu you have to enable “Advanced” menus via the help “?” button. Have guest isolation working now. Very cool!!!

JJ

15

The user interface for enabling the VLAN feature is much more confusing than it should be. Not sure why its hidden out of the box. That said, it is documented to work this way in user manual.

16

Thank you for the great explanation, @sitloongs! :slight_smile:

17

Hi i need some help when i do this the other SSID cant be found by my devices. The only one available is the guest SSID. What do you think could be wrong?

18

Nothing about creating an isolated SSID on the Surf SOHO hides the SSID itself. There is an option in most routers to hide the SSID but most people don’t think this is a worthwhile thing to do. Perhaps you hid the networks by mistake?

Another explanation of creating a “guest” network on the Surf SOHO is here

19

The thing is i had both ssids working and for some reason the primary one doesnt work. When i disable the guest network the primary one now comes up. i have not enabled the option to hide the SSID

20

The term “doesn’t work” for an SSID is vague. Can clients logon to the network at all? If not, maybe its a password issue. Or, can they logon to the SSID but not get to the Internet? If so, it might be a firewall rule issue.

As for why disabling one SSID would impact another SSID, I have no guess at all.

If you open a problem ticket, you may be able to upload a file with all the settings of your router to Peplink to have them review it.

21

Ok more detail. i have setup the guest network exactly as described in the post above. So the names for the different networks are the same

So i have created Guest VLAN 10 and disabled intervlan routing then i have gone to AP and created a new SSID linked to Guest VLAN 10 as described above

Once i do that the LAN SSID is no longer seen by any of my devices even though when i go to the dashboard its still listed

i have to delete the Guest SSID for the LAN SSID to be seen by my devices. Both cant be seen at the same time.

Im at my wits end

22

Can you please open a support ticket here for support team to check ? This is not the expected behavior.

1 Like
23

You are going to have be more detailed in your description of the problem for anyone to be able to help.

1 Like