DrayTek UK Users' Community Forum
Help, Advice and Solutions from DrayTek Users
Vigor 2927AX Setup Question
- cosmarchy
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 33
- Thank you received: 0
10 Dec 2022 20:22 #102052
by cosmarchy
Vigor 2927AX Setup Question was created by cosmarchy
Hi,
I have a Vigor 2927AX and am wondering whether it is possible to setup the way I am intending.
I currently have it setup as follows:
Wan1 - BT SmartHub2
P1 - TV
P2 - NAS
P3 - LAN
P4 - Nothing
P5 - Nothing
What I'd like to do is have a guest wifi and LAN port. From the manual, the wifi will setup SSID1 for WAN and LAN and SSID2 for WAN only. This looks to achieve the wifi part but on occasion I need to plug in to a wired connection so would ideally like to add one port (WAN2/P6 or P5 I don't know) so that it only has access to WAN and cannot connect to the LAN at all. This wifi and physical port segregation is to isolate my works computer entirely from my home network but maintain internet access so I can VPN in to work.
Is this possible?
For reference I am not intending on using this as the main router for various reasons, the short version is namely the phone line comes through the SmartHub and given BTs intransigence regarding the phone line, I need to maintain the SmrtHub for the time being. So I need to both these devices. On the plus side the Vigor is in a more suitable position and enables me to connect more devices to the wired ports.
Thanks
I have a Vigor 2927AX and am wondering whether it is possible to setup the way I am intending.
I currently have it setup as follows:
Wan1 - BT SmartHub2
P1 - TV
P2 - NAS
P3 - LAN
P4 - Nothing
P5 - Nothing
What I'd like to do is have a guest wifi and LAN port. From the manual, the wifi will setup SSID1 for WAN and LAN and SSID2 for WAN only. This looks to achieve the wifi part but on occasion I need to plug in to a wired connection so would ideally like to add one port (WAN2/P6 or P5 I don't know) so that it only has access to WAN and cannot connect to the LAN at all. This wifi and physical port segregation is to isolate my works computer entirely from my home network but maintain internet access so I can VPN in to work.
Is this possible?
For reference I am not intending on using this as the main router for various reasons, the short version is namely the phone line comes through the SmartHub and given BTs intransigence regarding the phone line, I need to maintain the SmrtHub for the time being. So I need to both these devices. On the plus side the Vigor is in a more suitable position and enables me to connect more devices to the wired ports.
Thanks
Please Log in or Create an account to join the conversation.
- piste basher
- Offline
- Big Contributor
Less
More
- Posts: 1199
- Thank you received: 9
11 Dec 2022 11:54 #102053
by piste basher
Replied by piste basher on topic Re: Vigor 2927AX Setup Question
If you want to plug a wired device into this port then it will have to have a LAN designated to it otherwise how will you connect? But that LAN doesn't have to be your main LAN - you can designate any of the others available and provided you do not enable Inter-LAN routing then it will have no access to your main LAN. All of your LANS will have WAN access by default - if you have more than one WAN (it doesn't sound like you do if you only have one Smarthub) then you can use the routing policy to decide which LANS have access to which WANS.
I don't understand what you mean by set up SSID2 for WAN only - as above, if it is not part of a LAN (if for guests then not your main LAN obviously) then how can clients connect to it?
I don't understand what you mean by set up SSID2 for WAN only - as above, if it is not part of a LAN (if for guests then not your main LAN obviously) then how can clients connect to it?
Please Log in or Create an account to join the conversation.
- cosmarchy
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 33
- Thank you received: 0
11 Dec 2022 20:56 #102054
by cosmarchy
Replied by cosmarchy on topic Re: Vigor 2927AX Setup Question
In the manual there is a section regarding wireless setup:
So what I wanted to so was to extend the visitor WAN only access to include one dedicated port as well as SSID 2 which is setup by the wireless wizard.
The rest of the ports would retain access to the LAN.
III-1-1 Wireless Wizard
On Wi-Fi-equipped models, you can configure the wireless access point (AP) using the
Wireless Wizard. The Host AP Configuration sets up SSID 1 for use by internal users, who are
allowed to access both the LAN and the WAN (Internet), whereas the Guest AP Configuration
sets up SSID 2 for use by visitors, who are allowed only WAN access and whose access speeds
can optionally be throttled
So what I wanted to so was to extend the visitor WAN only access to include one dedicated port as well as SSID 2 which is setup by the wireless wizard.
The rest of the ports would retain access to the LAN.
Please Log in or Create an account to join the conversation.
- piste basher
- Offline
- Big Contributor
Less
More
- Posts: 1199
- Thank you received: 9
12 Dec 2022 09:14 #102057
by piste basher
Replied by piste basher on topic Re: Vigor 2927AX Setup Question
As an experiment why not try using this wizard to set it up as you describe - connect a client to SSID2 and see what IP address it gets from the router?
But to do what you want to do with full control of what you're doing is very simple using the VLAN setup (section II-2-2 I believe) and forget about using the "wizard"
But to do what you want to do with full control of what you're doing is very simple using the VLAN setup (section II-2-2 I believe) and forget about using the "wizard"
Please Log in or Create an account to join the conversation.
- cosmarchy
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 33
- Thank you received: 0
12 Dec 2022 19:07 #102061
by cosmarchy
Ok, thanks for that. I'll give VLAN a look and see how I get on.
Replied by cosmarchy on topic Re: Vigor 2927AX Setup Question
Piste Basher wrote:
As an experiment why not try using this wizard to set it up as you describe - connect a client to SSID2 and see what IP address it gets from the router?
But to do what you want to do with full control of what you're doing is very simple using the VLAN setup (section II-2-2 I believe) and forget about using the "wizard"
Ok, thanks for that. I'll give VLAN a look and see how I get on.
Please Log in or Create an account to join the conversation.
Moderators: Chris, Sami
Copyright © 2024 DrayTek