NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
VLan not VLanning on GS728TP
Have several cameras which I'd like to put on their own vlan. And I have a server that handles those camers, which I'd like on the camera vlan and default vlan. I find that the GS728TP has 3 default v...
Here is how it should be configured as shown in the image below provided that all devices are within the same subnet:About port 3 where the camera server is connected on VLAN 4, it should be set as untagged (U) with PVID 4. It should also be set as untagged (U) on VLAN 5 to have communication to the cameras connected to ports 14, 16, 18 and 20.
For ports 14, 16, 18 and 20, it should be set as untagged (U) with PVID = 5. These ports should also be set as untagged (U) on VLAN 4 in order for the camera server to have access to the cameras.
About port 23, I did not know that it is the LAN printer. Port 23 should be on VLAN 4, untagged (U) and PVID = 4.
About port 2, you may set it as a member of VLAN 4 (if ever you want it in VLAN 4) set as untagged (U) with PVID = 4.
You can use the default Voice VLAN for IP phones wherein an IP phone is detected by its OID (Object Identifier) and segment all voice traffic.
About the default Auto-Video VLAN, you can use it applications that run multicast traffic.
Regards,
DaneA
NETGEAR Community Team
Kindly answer the questions below:
a. What is the network IP address of VLAN 5?
b. Is the camera server and the cameras within the same IP range of VLAN 5?
c. Is the camera server connected directly to the GS728TP?
d. How is everything connected? It would be best if you post a screenshot of your detailed network setup.
About VLAN 1, it is set as the management VLAN by default. You can change the management VLAN to any VLAN ID you want.
About the error message: "VLAN 1 : VLAN was not created by user" - it is a reminder that VLAN 1 cannot be edited.
Regards,
DaneA
NETGEAR Community Team
a. The class C is 192.168.111.0/24, same as VLAN4.
b. VLAN5 doesn't seem to have a class C range assigned in the switch, but yes the camera server and cameras are in the same class C, which is also the class C of the rest of the LAN in VLAN4.
c. Yes, connected diectly, as are all cameras.
d. I have a home server, Ubiquiti AP Pro (wifi), printer, and cameras, all connected directly to the GS728TP. Management of the GS is through my laptop, which connected wirelessly through the Ubiquiti.
VLAN1 for management is fine for me. I thought the Ubiquiti should be the only port in the management VLAN.
Somehow I had cleared the ports for the cameras in VLAN1. There is no 'U' or 'T' on those ports, they're blank. I haven't been able to set them back though nor make any other changes to VLAN1.
As I understand, both VLAN 4 and VLAN 5 are on the same subnet which is 192.168.111.0/24 and there is no router within your network setup. With regard to this, the applicable setup would be implementing Asymmetric VLAN.
Regards,
DaneA
NETGEAR Community TeamIt does appear that I need an asymmetric vlan. And that's what I thought I have set up, but it's not working. Here's what I intend: The cameras should dwell in their own private vlan. (vlan5 & pvid5) The camera server should also be in that vlan5 & pvid5 so it can capture video. But the camera server should also dwell on the normal LAN so that video can be watched (via a video application) by other machines in the normal LAN. This video would not be sourced directly from the cameras, but from the application. The aplication would source it directly from the cameras.
So the camera -server- should be able to access both vlans. (4 & 5) But the cameras should be only on 5 and normal machines only on 4. (all defined on the switch ports) And by assigning the camera server to both vlan4/pvid4 and vlan5/pvid5, I thought I had done that. But it doesn't work. I can't ping the cameras from the cameras server.
Yes, cameras and all other machines are in the same class C, although they don't have to be. I can assign two IPs to the cameras server interface if that would be best.
Consider for these purposes that there is no router. One of the other servers actually runs a virtual machine that is the router, but that's not needed in this case.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
