Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to setup a 48 ports gigabit switch (netgear GS748T).

My goal is to split the 48 ports to 3 vlans :

  • VLAN10 ports 2-20
  • VLAN20 ports 21-30
  • VLAN30 ports 31-46

What i did is :

  • On VLAN1, TAG port 1, UNTAG every other ports
  • On VLAN10, TAG PORTS 2-20, UNTAG every other ports
  • On VLAN20, TAG PORTS 21-30, UNTAG every other ports
  • On VLAN30, TAG PORTS 31-46, UNTAG every other ports

I didn't touch the PVID configuration page; don't know what this is.

Now, if i plug a cable to port 5, i can ping VLAN20 and VLAN30; same for VLAN20 i can ping VLAN10 and VLAN30.

What am I doing wrong here ? I'm quite new to VLANs ...

edit: VLAN10 is WAN (connected to firewall interface x0, public subnet/26) VLAN20 is MGMT (connected to firewall interface x4, 10.0.0.x/24)

Whenever i plug from firewall to vlan20 i see all ports of the switch go crazy and i have packet loss when pinging switch or accessing his web ui.

share|improve this question
    
You definitely don't want more than one VLAN untagged on a single port! –  David Schwartz Jun 29 '13 at 6:37

1 Answer 1

up vote 4 down vote accepted

do you want to have any trunk-port [port that combines more than one vlan] or do you just want to have total traffic separation for three groups?

if the second - i suggest you:

  • leave port 1 as it is for experimentation
  • set up vlan10 - port 2-20 untagged, all other ports blank [not member]
  • set up vlan20 - ports 21-30 untagged, all other ports blank [not member]
  • set up vlan30 - ports 31-46 untagged, all other ports blank [not member]
share|improve this answer
    
Ideally, yes i'd like to have ports than can be member of multiple vlans. –  Disco Feb 26 '12 at 9:44
    
also, switch has an IP address that is part of the vlan10 (wan) –  Disco Feb 26 '12 at 9:45
    
i want to be able to access the switch admin ip from port 1 (when i'm in datacenter) and from wan (vlan10) –  Disco Feb 26 '12 at 9:47
    
edited question: added firewall –  Disco Feb 26 '12 at 9:57
    
i'm not sure if it'll be possible to manage the switch from two different vlans [port 1 in vlan 1 and some port on vlan10]. making switch reachable from the internet is not a very good idea [from the security perspective]. –  pQd Feb 26 '12 at 10:43

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.