I have some branch locations with a simple set up. A router with an access switch connected to it, then another access switch connected to that one to provide POE to IP phones. Currently all devices are in the same VLAN.
I also have an access point connected to the access switch (non-POE) which provides wireless services to our visitors and personnel. I've been trying to separate the wireless traffic to its own VLAN. The AP provides DHCP services to the users that connect to it, and when it's setup in the same VLAN as the switches everything works fine.
AP config sample:
int bvi1
ip address 192.168.2.10 255.255.255.0
Access switch sample:
int fa0/20
switchport access vlan 2
swithport mode access
int fa0/1
switch port mode trunk
switchport trunk van 1 native
Router sample:
int fa0
int fa0.1
encapsulation dot1q vlan 1 native
ip address 192.168.1.1 255.255.255.0
int fa0.2
encapsulation dot1q vlan 2
ip address 192.168.2.1 255.255.255.0
router bhp 65515
network 192.168.1.1
network 192.168.2.1
Used sample configs because I don't have the original configs on me at the timed. I must admit there are also static routes in place to facilitate use of an SDWAN circuit. A default route sends all unknown unicast traffic to the SDWAN interface, while other static routes send traffic across our MPLS WAN.
Since everything works when all devices are in the same VLAN, I'm sure something is wrong in my configuration.
When I modify the setup to accommodate the new VLAN I can connect to the AP, reach locations across the WLAN, but no internet connectivity. I know I'm missing something simple. Can I get some suggestions on where else to look?
