WatchGuard Support Center

Knowledge Base - Article

 VLAN support in Wi-Fi Cloud

How do I configure VLANs for my wireless SSIDs in WatchGuard Wi-Fi Cloud?
In Wi-Fi Cloud, you can map your wireless network SSID to a VLAN mapping on your network.

A Virtual Local Area Network (VLAN) enables you to logically organize separate virtual networks within your physical network regardless of the location of your clients. Clients on a VLAN communicate as if they are on the same physical network. VLANs use an ID to identify the VLAN on the network. VLANs can be tagged (VLAN information is tagged within the Ethernet frame for communication with a VLAN-enabled switch), or untagged (no VLAN information sent). 

When you create an SSID in Wi-Fi Cloud, you can assign a VLAN ID to the SSID from 0 to 4094. The default VLAN ID is 0. Use the default value of 0 to map the SSID to the untagged VLAN on your switch port, regardless of the VLAN ID assigned to the untagged VLAN on the switch. Otherwise, you can enter a VLAN ID from 1-4094. For more information on how to add a VLAN ID to an SSID, see Configure SSID Settings. There is no theoretical limit to the number of SSIDs you can create, however, you can only assign a maximum of 8 SSIDs per radio on an AP.

You can also use Dynamic VLANs with Wi-Fi Cloud. A Dynamic VLAN automatically manages VLAN port configuration based on the client's MAC address and authentication to the network, and enables you to use multiple VLANs with a single SSID. Wi-Fi Cloud supports 32 Dynamic VLANs per SSID and up to 4 SSIDs with Dynamic VLANs per AP. This provides a total of up to 128 Dynamic VLANs per device template configuration for an AP. There is no theoretical limit to the number of device templates you can create. For more information on how to configure Dynamic VLANs in a device template, see Dynamic VLAN Assignment in Wi-Fi Cloud.