I'm pretty sure I have this set up correctly, but I wanted to be sure...
My home network is set up as follows:
Cable Modem ---> PoE Injector ---> ER-X (router) ---> ER-X (switch) ---> Airport Extreme ac (in bridge mode)
I settled on this setup since all of the ethernet runs in the house terminate in the garage, in an area that isn't exactly convenient to both a cable drop and power. Sure enough, a spare UAP-AC-LR PoE injector can power two ER-Xs, so the whole thing works out fairly well. The setup lets me have my cable modem and main router inside, and an ER-X fills the nice role of a reasonably-priced PoE-powered gigabit switch in the garage.
I would like to use the guest WIFI functionality on the Airport Extreme. In bridge mode all this does is tag the guest traffic as VLAN 1003. I have already set up the VLAN, DHCP server, and firewall rules on the ER-X acting as the router, and thiings seem like they're working as expected.
My question: Is there any reason to add a switch0.1003 interface on the ER-X acting as the switch? This ER-X doesn't actually have to tag/untag any traffic itself; the Airport Extreme is doing all of the tagging. The ER-X switch doesn't even need an IP address in the VLAN 1003 subnet (if it had one I would just firewall it off anyway). I'm just new to this whole VLAN thing and want to be sure I'm not missing something even though things are behaving as expected.
Thanks!
