synology 6600 router vlan firewall settings

[jmanko16]

I have a 6600 router with 2 2200 access points. I am trying to set up a VLan for my hikvision NVR, a vLAN for IOT, and an "external" vLAN I will try to use for audiobookshelf and plex, etc.

I have made the vLANs in the router and shown the image below. It seems easy enough, device IP on primary lan and allow to device ip on vLAN. I am unable to reach the service. This is also the first rule on the firewall.

Appreciate any assistance.

 

[fredbert]

Have you disabled "Enabled network isolation" on the VLANs that you want to be able to communicate between each other, based on firewall rules?

 

[jmanko16]

Have you disabled "Enabled network isolation" on the VLANs that you want to be able to communicate between each other, based on firewall rules?

View attachment 20675

Yes that was the first thing I did. It was unclear and I had it on.

I thought maybe somehow settings persisted, and even went through and made a new VLAN but same issue won't connect.

 

[jmanko16]

And figured it out. Dummy moment but apparently I still had the network segregation set to "on" with the primary network.

As a secondary question, is there any way to take current network and transition it to a secondary network? All devices are connected to it, but I would like my primary to be private and don't want to redo every single IOT device.

 

[fredbert]

Change the SSID and authentication on the primary VLAN. Then change the desired wireless VLAN to use that old SSID and old authentication. The devices should connect to the desired wireless VLAN now. Of course you'll have to reconnect the remaining devices to the new primary VLAN credentials. While doing that you might want to enable router management access from the desired wireless VLAN: so when everything switches you can access the router and complete the reconfiguration.

 

[jmanko16]

Change the SSID and authentication on the primary VLAN. Then change the desired wireless VLAN to use that old SSID and old authentication. The devices should connect to the desired wireless VLAN now. Of course you'll have to reconnect the remaining devices to the new primary VLAN credentials. While doing that you might want to enable router management access from the desired wireless VLAN: so when everything switches you can access the router and complete the reconfiguration.

Thanks. I was afraid to try this in case it all went haywire. Will report back if any issues

 

[fredbert]

Thanks. I was afraid to try this in case it all went haywire. Will report back if any issues

I've thought about this too. But I've hardly any IOT so I could do that as and when, before adding to the primary VLAN.

 

[jmanko16]

I've thought about this too. But I've hardly any IOT so I could do that as and when, before adding to the primary VLAN.

I have quite a few devices (Lutron lights, some wyze devices, a few power plugs that are wifi for energy monitoring), a few amazon Alexa's, Apple TVs, etc. Its going to be a mess so I think I'm going to try to get a "wife friendly" vLAN setup with a few devices first for her and kids and then try to move everything over.