DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Draytek 2830 Inter VLan communications

  • semu05
  • Topic Author
  • Offline
  • New Member
  • New Member
More
06 May 2014 18:29 #79860 by semu05
We have a Draytek 2830 with 2 Subnets. One for the admin office network and one for the Guest WiFi within the premises. However, we now need a wireless laptop which uses wireless on the Guest WiFi to be able access the admin network.

Is it possible to configure the Draytek 2830 to allow this type of communication between subnets for only this single device.

Thank you all in advance.

Please Log in or Create an account to join the conversation.

More
06 May 2014 21:31 #79864 by sicon
Replied by sicon on topic Re: Draytek 2830 Inter VLan communications
yes you can - you need to enable the inter Vlan routing (its just a tick box)
you then need to create LAN >Lan policies to allow and block the specific IPs

Please Log in or Create an account to join the conversation.

  • semu05
  • Topic Author
  • Offline
  • New Member
  • New Member
More
07 May 2014 06:25 #79871 by semu05
Replied by semu05 on topic Re: Draytek 2830 Inter VLan communications
Hi sicon,

Thanks for responding. I am new to this. Is there any way you could expand on this or even point me in the direction of some documentation on this.

Once again thank you for responding so quickly.

Please Log in or Create an account to join the conversation.

More
07 May 2014 09:02 #79873 by sicon
Replied by sicon on topic Re: Draytek 2830 Inter VLan communications
it would look a bit like this...

Please Log in or Create an account to join the conversation.

  • semu05
  • Topic Author
  • Offline
  • New Member
  • New Member
More
07 May 2014 13:30 #79882 by semu05
Replied by semu05 on topic Re: Draytek 2830 Inter VLan communications
Thanks again sicon for your reply.

I have implemented this and can now access the other subnet. However, this will allow anyone connecting to the second subnet (Guest WiFi) to access the Admin network. I know you mentioned LAN>LAN policies. Can you point me in the correct direction on how to set this up also?

Please Log in or Create an account to join the conversation.

More
07 May 2014 21:16 #79890 by sicon
Replied by sicon on topic Re: Draytek 2830 Inter VLan communications
you will need to create a data filter policy with the ...
Direction <LAN to LAN>
source <IP of laptop on Guest network that you want to access admin network> tick box that says invert selection
destination <admin network>
Services ANY
Action Block Immediately

That will then block anything except the IP address of the laptop that needs the access from the guest network to the admin network.
you may also want to assign a reservation in DHCP to the laptop always gets the same address.
If the draytek Is doing the dhcp then use Bind MAC to IP

Please Log in or Create an account to join the conversation.

Moderators: Sami