Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need some advice on how to set up 2 VLANs (on one switch, I have HP v1910-48G switch) that separate broadcast domain and also share a single internet connection. The two Vlans must remain separate, and cannot communicate with each other.

I did some searching and then found this example

And this is what I tried (Editted):

  • I have a HP-1910 48 ports layer 3 switch.
  • I connected a cable to the router (Linksys X1000, at 192.168.0.253) to the switch (backbone) on port 1. (vlan1, default)
  • I created another vlan 2 and then tag the backbone (port 1) and assigned ports 17-32 as untagged port of vlan 2.
  • I created another vlan 3 and then tag the backbone (port 1) and assigned ports 33-48 as untagged port of vlan 3,
  • Assigned the vlan interface ip 192.168.0.241(vlan1), 192.168.1.241/24(vlan2) and 192.168.2.241 (vlan3).
  • I connected 2 computers to port 17 and port 18(vlan 2) set gw of pc to 192.168.1.241. I have no problem pinging PCs in same vlan. I can also ping 192.168.1.241 (vlan2's interface). I can ping the router (192.168.0.253).
  • Then I connected a computer to port 35 (vlan 3) and set the default GW of the PC to 192.168.2.241. I tested the PC in Vlan1. It can't ping (which is fine, that's what I want), also no problem pinging 192.168.2.241 (vlan3's interface).

The Problem

  • I cannot access to the Internet from vlan2 and vlan3.
  • If I connect the computer to vlan1 (1,2,3,4), I can access Internet.

How can I solve these problems?

Details

HP v1910 IPv4 routing Switch's IPv4 routing

HP v1910 Vlans VLAN Interface

Linksys X1000 Routing table Routing table from router

share|improve this question

1 Answer 1

I suppose your main mistake is you try to make devices in different VLANs to communicate directly. This is impossible.

You wrote that you configured port1 as tagged for vlan 10 2 and vlan 20 3. It is right but not sufficient.

First, router's port must support VLANs. You need to configure subinterfaces on the router's physical port and "put" it to your corresponding VLANs. Next, assign ip addesses from VLAN's subnets accordinly to the subinterfaces and use them as default gateways.

Second, (but is not critical) it looks like you work with private subnets but 20.0.0.0 is not private subnet, you should not use It in a such way. Consider e.g. using 10.0.10.0/24 and 10.0.20.0/24 for VLANs 10 and 20 instead.

UPD

The configuration looks to be correct except "Linksys X1000, at 192.168.0.53" - typo in the question I guess, It should be 253.

I think X1000 is preconfigured to perform NAT for 192.168.0.0/24 only. Thus other subnets can not access Internet.

share|improve this answer
    
Here is my another post on stackexchange with more information. but i still have problem with access to the Internet form vlan. please check it. Thanks. –  NuMeMiie Jan 31 at 3:54
    
@NuMeMiie It is not good practice to have parallel questions. I saw that question is hold as "off-topic" in Network Engineering. I just asked the moderator to move It to this site. If moderators will agree and do It I will continue there. Otherwise I will continue here. –  Veniamin Jan 31 at 7:34
    
I'm sorry for that. I'll wait. thank you for your time. –  NuMeMiie Jan 31 at 7:47
    
Yes, about "Linksys X1000, at 192.168.0.53" in the question is my fault. it 192.168.0.253 as you say (I've edited already). So, please tell me more if you know how to config Linksys X1000 to perform NAT for other subnet. I'll do more research about this X1000 too. Thanks. –  NuMeMiie Jan 31 at 12:19
    
I am afraid this is impossible unless supported directly in config web interface. It seems this this model is not supported by third-party firmware vendors like tomato or openwrt. –  Veniamin Jan 31 at 13:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.