NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
VLan not VLanning on GS728TP
Have several cameras which I'd like to put on their own vlan. And I have a server that handles those camers, which I'd like on the camera vlan and default vlan. I find that the GS728TP has 3 default v...
Here is how it should be configured as shown in the image below provided that all devices are within the same subnet:About port 3 where the camera server is connected on VLAN 4, it should be set as untagged (U) with PVID 4. It should also be set as untagged (U) on VLAN 5 to have communication to the cameras connected to ports 14, 16, 18 and 20.
For ports 14, 16, 18 and 20, it should be set as untagged (U) with PVID = 5. These ports should also be set as untagged (U) on VLAN 4 in order for the camera server to have access to the cameras.
About port 23, I did not know that it is the LAN printer. Port 23 should be on VLAN 4, untagged (U) and PVID = 4.
About port 2, you may set it as a member of VLAN 4 (if ever you want it in VLAN 4) set as untagged (U) with PVID = 4.
You can use the default Voice VLAN for IP phones wherein an IP phone is detected by its OID (Object Identifier) and segment all voice traffic.
About the default Auto-Video VLAN, you can use it applications that run multicast traffic.
Regards,
DaneA
NETGEAR Community Team
Applying what we know about Asymmetric VLAN, you will need to set the following below in order for port 2 to have connectivity with the devices in VLAN 4:
1. Set port 2 as untagged (U) on VLAN 4 with PVID = 1.
2. Set ports 3 and 23 as untagged (U) ports in VLAN 1 with PVID = 4.
Refer to the image below:
Even though VLAN 1 is the management VLAN by default, some network administrators set the management VLAN to any other VLAN ID because it is already well-known that VLAN 1 is the default management VLAN.
Regards,
DaneA
NETGEAR Community Team
[quote]1. Set port 2 as untagged (U) on VLAN 4 with PVID = 1.
2. Set ports 3 and 23 as untagged (U) ports in VLAN 1 with PVID = 4. [/quote]
Why yes, that's what I should have thought too. But remember, when I try to Untag ports in VLAN1, which are in another VPID, I get my old friend the unhelpful "VLAN 1 : VLAN was not created by user."
As I have mentioned in my initial response to you: "Not all NETGEAR switches support tagging on VLAN 1 and it seems that the GS728TP is one of those switches that is why it does not allow you to tag a port or clear anything on VLAN 1. " With regard to this, I suggest you to not use VLAN 1 as the management VLAN. Change your management VLAN to any other VLAN. As reference, kindly read pages 27-28 of the GS728TP software administration manual here about changing the management VLAN.
Regards,
DaneA
NETGEAR Community Team
I know, nice in theory. Unfortunately that is impossible. Evidently you haven't actually tried to do this.
- I create new VLAN12, name it Office and Untag all connected ports to it.
- I create new VLAN 23, name it Cameras, and Untag the Port 3 camera server and all cameras to it.
- I create new VLAN105, do not name it, and Untag port 2 (my management server) to it.
Fine and good. Now comes the bad part. Do I first set the VPID of Port 2 to 105, or do I first set the Management VLAN to 105? Amusingly it doesn't matter, as either approach causes me to lose connection and forces a Festival Of Factory Resets.
What you did is right. You have set port 2 as untagged (U) port with PVID of 105 then, changed the Management VLAN to 105. Since a new management VLAN is configured, it is expected that the connectivity through the existing management VLAN will be lost. Kindly try the steps below:
a. Make sure that you remember the IP address set on the IP Settings of the GS728TP switch before you have changed the Management VLAN to 105. It would be best that you set a static IP address to the GS728TP switch.
b. Reboot the GS728TP switch.
c. Unplug/replug the PC that is directly connected to port 2 of the GS728TP switch. Set a static IP address on the PC that is within the IP range of the set on the GS728TP switch.
d. Open command prompt on your PC then check if you will get replies when you ping the IP address set on the GS728TP switch. If you are able to get replies, it means that you can access the web-GUI of the switch and managed it.
Regards,
DaneA
NETGEAR Community Team
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
