I have my ISP modem connected to a 3rd party WiFi Router (Mi 4A Gigabit Router 1 WAN, 2 LAN) with one of it's LAN feeding into the Port 1 of Aruba 1930 Switch (Locally Managed).
I wish to turn of WiFi in my Mi Gigabit Router and connect a second Mi Gigabit WiFi Router in "AP Mode" to the Port 5 of the 1930 and define VLANs within the switch to segregate and secure my IOT and IP Cameras from ingress.
My Workstation and Server are connected to the Port 2 and Port 3of the Switch via Ethernet.
Is this possible, or should I introduce a PFsense FW between my router and 1930 to get this done?
ISP Modem -> Mi Router (DHCP and WiFi On) -> 1930 Switch (No VLANs)-> Wired Clients
ISP Modem -> Mi Router (DHCP On, WiFi Off) -> 1930 Switch [2 VLANS: VLAN20(1-4ports)VLAN30(port5)]-> WiFi AP(Port5) -> Wired Clients (VLAN20) -> IOT Devices (VLAN30)
I shared this with my team and should have an update for you soon.
Does your MI router support running 2 DHCP scopes as most routers will allow only one DHCP scope as 1930 doesn't support a DHCP server? If that's possible then you can achieve the expected setup.
Unfortunately, the MI router support only one DHCP.
I have Open DNS set up
But can I disable DHCP server in the Mi router and assign a static IP to the Aruba Switch so that I can then turn on the DHCP server in the Aruba Switch to achieve the desired outcome? (to avoid double NAT)