NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
VLan not VLanning on GS728TP
Have several cameras which I'd like to put on their own vlan. And I have a server that handles those camers, which I'd like on the camera vlan and default vlan. I find that the GS728TP has 3 default v...
Here is how it should be configured as shown in the image below provided that all devices are within the same subnet:About port 3 where the camera server is connected on VLAN 4, it should be set as untagged (U) with PVID 4. It should also be set as untagged (U) on VLAN 5 to have communication to the cameras connected to ports 14, 16, 18 and 20.
For ports 14, 16, 18 and 20, it should be set as untagged (U) with PVID = 5. These ports should also be set as untagged (U) on VLAN 4 in order for the camera server to have access to the cameras.
About port 23, I did not know that it is the LAN printer. Port 23 should be on VLAN 4, untagged (U) and PVID = 4.
About port 2, you may set it as a member of VLAN 4 (if ever you want it in VLAN 4) set as untagged (U) with PVID = 4.
You can use the default Voice VLAN for IP phones wherein an IP phone is detected by its OID (Object Identifier) and segment all voice traffic.
About the default Auto-Video VLAN, you can use it applications that run multicast traffic.
Regards,
DaneA
NETGEAR Community Team
As I understand, both VLAN 4 and VLAN 5 are on the same subnet which is 192.168.111.0/24 and there is no router within your network setup. With regard to this, the applicable setup would be implementing Asymmetric VLAN.
Regards,
DaneA
NETGEAR Community Team
It does appear that I need an asymmetric vlan. And that's what I thought I have set up, but it's not working. Here's what I intend: The cameras should dwell in their own private vlan. (vlan5 & pvid5) The camera server should also be in that vlan5 & pvid5 so it can capture video. But the camera server should also dwell on the normal LAN so that video can be watched (via a video application) by other machines in the normal LAN. This video would not be sourced directly from the cameras, but from the application. The aplication would source it directly from the cameras.
So the camera -server- should be able to access both vlans. (4 & 5) But the cameras should be only on 5 and normal machines only on 4. (all defined on the switch ports) And by assigning the camera server to both vlan4/pvid4 and vlan5/pvid5, I thought I had done that. But it doesn't work. I can't ping the cameras from the cameras server.
Yes, cameras and all other machines are in the same class C, although they don't have to be. I can assign two IPs to the cameras server interface if that would be best.
Consider for these purposes that there is no router. One of the other servers actually runs a virtual machine that is the router, but that's not needed in this case.
Any idea whyit doesn't work?
Does anyone know why, at one time I could clear the Untag ports in vlan1, but now I can't?
Has anyone been able to Tag or clear the Untagged ports in vlan1?
Ok, changing the PVID of the cameras to the Camera vlan5, cleared the untag for them in vlan1.
In experimenting with this last week I tried clearing all Untags and then lost all control of the switch, so had to do a factory reset. Trying to Download the config using tftp did not work, for reasons that aren't apparent; I had the tftp server running, firewall open, path and file defined, but it simply would not take the config so I had to start all over again.
All I want to do is set a vlan for Office, and a vlan for Cameras, and have one of the servers be on both vlans. I don't understand how this is so complicated and why we can't achieve it?
... Ant I've just had to do a factory reset again! There is so much customization I like to do, and I have to manually pick my way around to do all the settings each time this happens.
- I set the VPID of cameras to 5.
- Then I set the VLAN of cameras to 5
- and VLAN of cam server to 4 & 5.
I then could not ping cameras nor cam server.
- I then set the office servers to VLAN 4.
I then could not ping any of the office servers, and I soon lost all control as the UniFi AP Pro I was adminning through, depends on one of those office servers.
This is ridiculous.
Let us isolate the problem. Here are the steps below:
1. Connect 2 PCs to the ports of the GS728TP switch that belong to VLAN 4. Let us label it as PC1 and PC2
2. Make sure that the ports are untagged with a PVID of 4.
3. Check if the 2 PCs are able to get a valid IP address within the network range of VLAN 4.
4. From PC1, check if you can get replies when you ping the IP address of PC2.
5. From PC2, check if you can get replies when you ping the IP address of PC1.
Note: Do the same steps above but this time, connect the 2 PCs to the ports that belong to VLAN 5 and make sure its untagged with a PVID of 5. If you are able to get replies from each other PC, then it means that you have correctly set up VLAN 4 and VLAN 5.
If ever still you are having problems setting up VLANs on your GS728TP switch, I suggest you to open a chat or online case with NETGEAR Support for further assistance.
Regards,
DaneA
NETGEAR Community Team
It doesn't work. I set the cameras server to PVID4 (so it can still communicate with the office LAN) and disable ingress filtering and set it to VLAN4. Then I set the cameras to PVID5 and VLAN5. But from the cameras server I then cannot ping -anything- including the cameras.
I need the cameras server to be able to communicate on both VLAN4 and VLAN5, but I want to isolate the cameras to VLAN5.
Just to verify. Kindly answer the questions below:
a. Were you able to perform the steps I suggested to isolate the problem?
b. Do the PCs get a valid IP address in either VLAN 4 or VLAN 5 as you proceed with the steps given? If not, kindly set a static IP address on the PCs that is within the IP range of VLAN 4 and VLAN 5.
c. Did you set up Asymmetrical VLAN?
d. Have you already opened a chat or online case with NETGEAR Support?
Regards,
DaneA
NETGEAR Community Team
a. I had to modify your steps as I have only 3 servers, 2 of which are mission-critical. So I used the non-mission-critical (cameras) server, and the cameras.
b. We do not use DHCP, we use static IP, and I made no changes to the IP addresses when I put the cameras and camera server on vlan5. When all on vlan1, all systems can see one another. When I put the cameras server on vlans 4 & 5, it disappears from the other systems. And from the cameras server I cannot ping the cameras.
c. I did exactly as I described above, which should be asymmetric vlan.
d. Support costs money, and this appears to me to be a defect in the firmware of the device, which is not my fault.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
