Hopefully someone can answer in terms of really simple ABC basics, ideally with guidance.
A. Is CnMaestro X, able to do its own VLAN segregation. If so how/where can this be set up? i.e. we only want Guest WLAN to have access to the Internet and nothing else on the network?
B. On the port on the switch that connects to the Wi-Fi Units we have VLAN 10 - Data and VLAN 20 - For Internet Only. How/where do we set this up so Guest Wi Fi WLAN uses VLAN 20 and Normal Wi-Fi WLAN uses VLAN 10?
C. If A or B are not possible, is CnMaestro X, able to do its own DHCP. We would therefore set the Guest WLAN on a obscure 10.1.3.0/24 IP range?
Thank you and appreciated
Ajmal,
Welcome to Cambium Community!
In cnMaestroX, there are 2 features that you need to use. Assuming that you are using cnMatrix switches, you can set the configuration of your switches in a switch group. I would use Policy Based Automation to identify the AP plugged into a switch port, and configure the port with VLAN 10 and 20 in trunk mode, or if you need untagged traffic to manage the AP’s, use hybrid mode allowing VLAN’s 1,10, 20. Your gateway will be configured with VLAN’s 10 and 20 connecting to the correct devices outside the wireless network.
The second feature you use is AP groups. First configure your WLAN’s with appropriate SSID, and VLAN for each of your services. Attach the VLAN’s to an AP group, and onboard the AP’s to cnMaestroX in the AP group and network scope.
Third, configure the Guest Access Portal. Use this to have guests authenticate to the network (there are a few ways to do that), and then you can control the service you give to the guests - for example, session length, max information rate, and other parameters - too many to list here). The guest access portal is connected to the guest SSID, so that when a new client comes online, they get the portal splash page, and can make the choices you give (free access, voucher base, paid, or other authentication system) to the guests.
Traffic does not flow through cnMaestro at all…in Cambium’s AP’s the controller is physically located in each AP, so cnMaestroX looks after the configuration, and also provides Assists and Analytics for the network and clients connected to it.
Bottom Line for your request: I’ve described how to accomplish A, B if you are using cnMatrix switches, and C is not possible with cnMaestroX, as cnMaestro is not in the traffic path.
Hope this helps,
Dave.
1 Like