No Internet access with Guest/Internet network types

Access Points
1

Just made the switch from consumer-grade wifi, excited to have just installed two AP6 Pro yesterday. Lots of great advice and guidance on this forum that I’ve already put to use, but I ran into an issue and wasn’t able to find help via search.

Rather than multiple vlans on a single SSID I’ve segmented wireless network traffic via three SSIDs. SSID 1 is trusted wireless clients, SSID 2 is IOT, and SSID 3 is for visitors and guests.

If I set the network type to anything other than Large or Standard, devices on the SSID cannot access the Internet. I use Firewalla for my router and have great visibility into real-time traffic and network flows and it shows the device traffic never gets to the router.

Speculating that the AP6 Pro logic to determine ‘local’ vs ‘internet’ traffic is interpreting my routing/network segmentation in a way that causes it to block traffic to an intermediate segment and breaks Internet connectivity.

Any insights? I’d like to avoid setting 2 and 3 up as unrestricted networks. I can control access via firewall rules but would really like to have client isolation within the guest network.

Thanks in advance.

1 Like
2

Welcome to the community.

Can you double check they all show vlan 1 in the settings.

Any chance you can post some screenshots to help please

image
image1290×2396 203 KB

Make sure you didn’t turn off multi vlan as above

3

Thanks for the welcome, and for your suggestions.

After trying your suggestions unsuccessfully I was continuing my research and remembered these segments were previously using pi-hole locally for DNS (permitted via firewall rules), Reconfigured DHCP to use the router as DNS and everything started working correctly.

1 Like