Vlan 1- AP --- 2 - SM

Hi ,

I would like to create a vlan in both SM’s, i had been reading some information about it, i read the presentarion (http://ben.cbccgroup.com/filez/ ) that was posted here, but i hadn"t sucess.

I have one AP and two SM, i would like to put both SM"s each one in one Vlan, like this:

AP ------------------VLAN 1 -------------- SM1
|---------------------VLAN2 ----------------SM2

my configuration at AP is:

AP configuration : - Configuration Source = SM

- VLAN enable

- Dynamic Learning enable

- Allow only tag frame disable

- VLAN ageing timeout 25

- Management VID 1

- Vlan membership 10 static

SM1 Configuration : - Dynamic Learning enable

- Allow Frame Types : all frame

- Vlan ageing timeout 25

- Untagged ingress VID 10

- Management VID 1

SM2 Configuration : - Dynamic Learning enable

- Allow Frame Types : all frame

- Vlan ageing timeout 25

- Untagged ingress VID 10

- Management VID 1

Someone can help me ?


The way you have the network setup right now has both SM’s in the same VLAN. I was unable to determine from your description whether or not you wanted BOTH SM’s in the SAME VLAN, or each SM on its OWN VLAN.

Right now you have both of them on the SAME VLAN, which is has a VID of 10. You have the Managemend ID of the AP and both SM’s set to 1, which means that the only way you can access the web-based GUI of the SM’s is if you first login to the AP, then login to the SM’s via their LUID. The only other way to access the SM from its Ethernet side would be to use a VLAN capable NIC in a laptop or whatever, which has the ability to tag frames. You would have to configure that NIC to tag frames with a VID of 1, which is the VID that the SM is going to look for to permit access to its GUI.

What specific problems are you having? What exactly are you trying to accomplish? From your current configuration, as long as both end-user devices connected to the SM’s are on the same logical subnet, they should be able to communication with eachother. If you change the VID of one of the SM’s to something like, VID of 11, and add VID 11 to the AP’s Membership Table and keep both end-user devices on the same subnet, they should NOT be able to communicate.

Hope this helps.

Hi msmith, tks by reply my question!

What i want , is as you said , put each SM on its OWN VLAN !!

AP ---- vlan1 – SM1
|---------Vlan2 – SM2

my configuration for this problem, how is it ?

tks very much for help me !


Your configuration problem is that you have both SM’s being members of the same VLAN. Keep SM1’s configurations the same. Change SM2’s Untagged ingress VID from 10 to 11. Then, login to the AP and add VID 11 to the AP’s VID Membership table. Save changes, reboot.

Now, you have SM1 being a member of VLAN 10, and SM2 being a member of VLAN 11. Connect a laptop to both of the SM’s and give the laptops IP addresses on the same subnet, i.e. and 192.168.101/24. Try to ping one laptop from the other. The ping should fail.

Is this test being conducted in a lab setting or on a bench? I hope so. VLAN experiments should be done such that you have physical access to all Canopy devices in the event you need to use the default plug to set back to factory defaults.

Keep me posted.

thanks very much !! i will try this configuration !!



Does anyone else do this for all of their SM’s?

I’ve heard that having each SM in its own VLAN will cut down on bandwidth being used for broadcast. Does this hold true in the field?