VLAN tagging on SSID - Did I do this right?

nguyenhu95
Here to help

VLAN tagging on SSID - Did I do this right?

Hello

 

I'm setting up an SSID for a contractor to install IoT sensors, from a 3rd party. So I set up a separate VLAN 20 on MX and an SSID called Wifi_IoT with VLAN Tagging 20. They are saying they can't connect their sensors to our wifi. Did I set this SSID and VLAN up correctly?

 

Also, I just want to double check, currently we have multiple VLANs on this MX, in my case, in my case, any client that connects to SSID Wifi_IoT will get assigned VLAN 20 IP address, is that correct?

 

nguyenhu95_1-1754469359087.png

 

nguyenhu95_0-1754469318613.png

nguyenhu95_2-1754469397358.png

 

nguyenhu95_3-1754469441957.png

 

This is the configuration for the switch ports that connected to MX and APs.

nguyenhu95_0-1754469753835.png

 

 

11 Replies 11
jimmyt234
Head in the Cloud

Are you tagging VLAN 20 on the switchport facing the access point(s)?

nguyenhu95
Here to help

sorry, I was meant to include the switch port configuration where the APs are connected to. I added it at the end of this post. Thanks

ww
Kind of a big deal
Kind of a big deal

Is that the config of the trunk to AP .

And also the trunk between switch-mx?

 

nguyenhu95
Here to help

yeah, the port configuration between switch - APs, and switch - MX is the same.

ww
Kind of a big deal
Kind of a big deal

Looks good so far.

Your radio settings have 2.4ghz enabled?

Any logging on the wireless health page regarding this ssid?

nguyenhu95
Here to help

Yeah, both 2.4GHz and 5GHz enabled. there's no logs at the moment as I'm still waiting for more information from contractor, just wanted to make sure I set up everything correctly

nicdc01
Getting noticed

Could be the case that the devices are having difficulty connecting to the Hidden SSID. 

Try un-hiding and seeing if the IoT devices are able to connect or not. If they can you might be able to get away with hiding it again and having them stay connected.

alemabrahao
Kind of a big deal
Kind of a big deal

Make a simple test configuring one port on access mode on the VLAN 20, and plug your PC on this to check if you are to get an IP.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
nguyenhu95
Here to help

thanks, I will do this when I can get in touch with contractor

 

DevOps_RC
Building a reputation

From the shown configuration it looks ok. Any info shown on the AP logs relating to the MAC address of the sensor, or check in the Timeline tab of the AP to see if it shows errors for that SSID, to determine if its association, authentication, DHCP or another step that the device is failing at. If it's a hidden SSID, can the Sensor itself be set to connect even if the SSID is set to not broadcasting. I'd check also use the Wireless>Overview section and narrow it down to the SSID to see any issues. 

One last suggestion, try connecting with a mobile phone to the SSID, if you can get on-site yourself, to determine if it's the IOT sensor itself with the issue.

PhilipDAth
Kind of a big deal
Kind of a big deal

Try splitting the problem in two.

 

Place a port on the switch manually into VLAN20 (access port).  Plug in your notebook, does it work?

Attach your own notebook to the SSID, does it work?

Get notified when there are additional replies to this discussion.