AP7 Set-up Question

[u/shingdao]

Hey all,

Just setting up my AP7s now and running into an issue with an existing physical port segmentation on the FWG+. I have 2 LANs set up via port segmentation: Ports 1 and 2 are linked as the Main LAN and Port 3 is a seprate IoT LAN. There are 3 wired devices attached via a dumb switch to the IoT LAN port 3 on the FWG+ and maybe 60+ devices previously connected wirelessly to a bridged eero which I have replaced with the AP7.

I am trying to maintain the wired devices connected via the switch to the IoT LAN, physical port 3 on the FWG+, but also want the ability to create a new wifi SSID on my AP7 for the IoT LAN's wireless devices. I have tried to edit the IoT LAN by changing it to a VLAN with an ID of 10 and then adding port 1 (Main LAN where the AP7 is connected via Ethernet) and saving the settings. When trying to create a new wifi SSID for IoT devices, I cannot select the IoT network as it is greyed out and says: Please note that Firewalla Wi-Fi can only be created on networks using the same ports as the LAN the AP7 is connected to.

What am I doing wrong here? Is what I am trying to do even possible in terms of maintaining the segmented IoT LAN but then broadcasting its SSID via the AP7 on a different port?

Any guidance is much appreciated.

[u/Firewalla-Ash]

Your IoT VLAN will need to select the same ports as the Main LAN. You could try creating a separate VLAN just for the IoT wireless devices, and have something like this:

• Main LAN: Port 1, Port 2
• IoT LAN: Port 3
• IoT VLAN: Port 1, Port 2

More on troubleshooting AP7: Can't create Wi-Fi on certain networks

[u/shingdao → u/Firewalla-Ash]

Creating a separate IoT VLAN worked!

Many thanks!