How to configure Management VLAN in Standalone mode for EAP

Management VLAN provides a safer method to manage the EAP. With Management VLAN enabled, only the hosts in the Management VLAN can access the web page of the EAP. Since most hosts cannot process VLAN TAGs, you can connect the management host to the network via a switch, and set up correct VLAN settings for the switches on the network to ensure the communication between the host and the EAP in the Management VLAN. This article introduces how to configure Management VLAN in standalone mode.

Step 1 log in to the web interface of the EAP Series products.

Please refer to this link to log into the web interface of the EAP: https://www.tp-link.com/support/faq/1000/

Step 2 Go to Management-Management VLAN to enable management VLAN.

Please specify the VLAN ID of the management VLAN. Only the hosts in the Management VLAN can log in to the EAP via the Ethernet port.

Note: Once you have enabled the management VLAN and input the VLAN ID here, the EAP will get a IP from corresponding management VLAN network, thus will be disconnected from the computer which is not in the management VLAN. So you cannot log in to the web interface of the EAP anymore with the present PC once Management VLAN enabled.

However, if you want them talk to each other still, as long as the traffic between VLANs is not blocked, you could allow the hosts from other VLANs accessing the EAP by enabling Layer-3 accessibility before management VLAN configuration.

About how to enable layer-3 Accessibility

Go to Management –Web Server to enable Layer-3-Accessibility

Layer-3 Accessibility: With this feature enabled, devices from a different subnet can access the management web page of the EAP. With this feature disabled, only the devices in the same subnet can access the management web page of the EAP. Layer-3 Accessibility is disabled by default for safety reasons.