How To Set Up Vlans On Your Tp-Link Eap670 For Guest Networks

by

Setting up VLANs on your TP-Link EAP670 can enhance your network security by isolating guest traffic from your main network. This guide provides step-by-step instructions to configure VLANs specifically for guest networks on your device.

Prerequisites

  • TP-Link EAP670 access point with firmware version supporting VLAN configuration
  • Administrative access to the EAP670 web interface
  • Basic understanding of networking and VLAN concepts

Accessing the Web Interface

Connect your computer to the same network as your EAP670. Open a web browser and enter the device’s IP address. Log in with your administrator credentials.

Configuring VLANs for Guest Networks

Step 1: Navigate to VLAN Settings

In the web interface, go to the Network or VLAN section, depending on your firmware version. Locate the VLAN configuration page.

Step 2: Create a New VLAN

Click on Add VLAN or Create. Assign a unique VLAN ID (e.g., 100) that is not used by existing VLANs. Name it Guest Network for clarity.

Step 3: Configure VLAN Settings

Set the VLAN type to Tagged or Untagged, based on your network setup. Assign the VLAN to the port(s) connected to your guest access points or switch ports.

Assigning VLANs to SSID

Step 4: Create or Edit Guest SSID

Navigate to the wireless settings. Create a new SSID named Guest Network, or edit an existing one. In the VLAN settings for this SSID, select the VLAN ID you created (e.g., 100).

Step 5: Save and Apply Settings

Save your changes and apply the configuration. Your guest network will now be on a separate VLAN, isolating it from your main network.

Testing and Verification

Connect a device to the guest Wi-Fi SSID. Verify that the device receives an IP address from the guest network subnet. Attempt to access resources on your main network to confirm isolation.

Additional Tips

  • Ensure your switch supports VLAN tagging if using wired connections.
  • Update your firmware regularly for improved features and security.
  • Document your VLAN IDs and network plan for future reference.

By following these steps, you can successfully set up VLANs on your TP-Link EAP670 to create a secure and isolated guest network environment.