How to bind SSIDs to designated ethernet ports on AP230?

  • 1
  • Question
  • Updated 3 years ago
  • Answered
Using a mesh with eight AP-230 devices, we want to communicate with two different LANs which are strictly separated networks with two different DHCP-Servers:
SSID #1 -> eth0 -> LAN #1 with AD and RADIUS-Proxy
SSID #2 -> eth1 -> LAN #2 with own authentication mechanism

Clients connecting to AP-230 using SSID #1 should get an IP-address from the DHCP-server used in LAN #1 and should use RADIUS-authentication, while clients connecting using SSID #2 should get an IP-address from the DHCP-server used in LAN #2.

Is it correct to configure eth0 and eth1 to be in backhaul mode? Is it sufficient to use two different VLAN-IDs for SSID #1 and SSID #2 to have a completely separated traffic on eth0/eth1?

Or does the exists an option just to have "use SSID #1 only on eth0" and "use SSID #2 only on eth1"?
Photo of Joachim Deckers

Joachim Deckers

  • 2 Posts
  • 0 Reply Likes
  • unsure

Posted 3 years ago

  • 1
Photo of Jonathan Hurtt

Jonathan Hurtt

  • 98 Posts
  • 48 Reply Likes
Photo of Joachim Deckers

Joachim Deckers

  • 2 Posts
  • 0 Reply Likes
Thank you!

There is just one problem mentioned: Management traffic like RADIUS authentication is sent only to eth0. So there could not be a RADIUS-server on a physically separated eth1-network?
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Most people just use VLANs as they are isolated L2 broadcast domains. It is quite atypical these days with modern equipment to want to use physically isolated connections as you don't really gain much-if-anything from an isolation perspective. Assuming things are configured correctly, logical isolation should be just as good.