NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Quantumn
Sep 30, 2017Aspirant
VLan not VLanning on GS728TP
Have several cameras which I'd like to put on their own vlan. And I have a server that handles those camers, which I'd like on the camera vlan and default vlan. I find that the GS728TP has 3 default v...
- Oct 19, 2017
Here is how it should be configured as shown in the image below provided that all devices are within the same subnet:About port 3 where the camera server is connected on VLAN 4, it should be set as untagged (U) with PVID 4. It should also be set as untagged (U) on VLAN 5 to have communication to the cameras connected to ports 14, 16, 18 and 20.
For ports 14, 16, 18 and 20, it should be set as untagged (U) with PVID = 5. These ports should also be set as untagged (U) on VLAN 4 in order for the camera server to have access to the cameras.
About port 23, I did not know that it is the LAN printer. Port 23 should be on VLAN 4, untagged (U) and PVID = 4.
About port 2, you may set it as a member of VLAN 4 (if ever you want it in VLAN 4) set as untagged (U) with PVID = 4.
You can use the default Voice VLAN for IP phones wherein an IP phone is detected by its OID (Object Identifier) and segment all voice traffic.
About the default Auto-Video VLAN, you can use it applications that run multicast traffic.
Regards,
DaneA
NETGEAR Community Team
Quantumn
Sep 30, 2017Aspirant
So, if the device attached to a given port does not understand VLAN tagging, you set it to U in its VLAN?
Quantumn
Sep 30, 2017Aspirant
I guess VLAN does not work on the GS728TP with the latest firmware and this is hopeless.
I created two new static vlans, office and cameras. I Untagged the servers to office vlan and Untagged the cameras to the camera vlan. Then I set the pvid for cameras and camera server to the camera vlan, and Acceptable Frame Types to vlan only. Now no one can ping the cameras, including the camera server. When I set it to Accept All, anyone can ping the cameras, which is also wrong.
And then I try to clear the Untag for the cameras in vlan 1, it pops up a window saying, "VLAN 1 : VLAN was not created by user." Wat? I wasn't trying to create a vlan, I was trying to clear a port. So it does not allow me to tag or clear anything in vlan1.
I think it's clear this firmware is busted and vlan does not work on this switch.
- DaneAOct 01, 2017NETGEAR Employee Retired
Hi Quantumn,
Welcome to the community! :)
VLANs 1 , 2, and 3 are created by default in the GS728TP switch. Not all NETGEAR switches support tagging on VLAN 1 and it seems that the GS728TP is one of those switches that is why it does not allow you to tag a port or clear anything on VLAN 1.
Are your cameras VLAN-aware devices? If yes, the ports where the cameras are connected should be set as tagged (T) ports with a PVID of 1. Make sure to assign the appropriate VLAN in the VLAN settings of the camera. For example, if the Camera VLAN is VLAN 9 then set the VLAN 9 on the camera settings.
Otherwise, if your cameras are not VLAN-aware devices, the ports where the cameras are connected should be set as untagged (U) ports with a PVID that corresponds to the VLAN number of the Camera VLAN. For example, if the Camera VLAN is VLAN 9, then the PVID of the ports where the cameras are connected should be set to 9.
About your Office VLAN, I believe mostly are PCs connected to the ports that are members of the Office VLAN. PCs are not VLAN aware devices. These ports should be set as untagged (U) ports with a PVID that corresponds to the VLAN number of the Office VLAN. For example, if the Office VLAN is VLAN 10, then the PVID of the ports where the cameras are connected should be set to 10.
Let me share the article below and use it as your reference guide in creating VLANs:
How to create Layer 2 VLANs on NETGEAR ProSAFE Switches
Regards,
DaneA
NETGEAR Community Team
- QuantumnOct 01, 2017Aspirant
Thank you Dane, yes I thought all this too, as I'd explained above, and I've scoured that webpage as well. With the camera server and cameras all Untagged on static vlan5, the server can no longer ping the cameras. Does not make sense.
I don't understand why to leave all devicen untagged on VLAN1. Isn't that supposed to be the admin LAN only? Docs say so.
Also, at some point I managed to -clear- the Untags for cameras in VLAN1, but now I can't make any further changes including reUntagging the cameras. When in VLAN1 I change a camera from -cleared- to Untagged and Apply, it pops up a window saying, "VLAN 1 : VLAN was not created by user." {Der} I'm not trying to create a VLAN, once again. And since I can not put my cameras in vlan1 I can not reach them to see if they support vlan. Untagged should work in any case, assuming vlan is not enabled in the cameras.
- QuantumnOct 01, 2017Aspirant
And I've just set the PVID for cameras to Admit All, and still no machine can ping them, including the cameras server.
Sure looks like firmware problems.
- DaneAOct 02, 2017NETGEAR Employee Retired
Kindly answer the questions below:
a. What is the network IP address of VLAN 5?
b. Is the camera server and the cameras within the same IP range of VLAN 5?
c. Is the camera server connected directly to the GS728TP?
d. How is everything connected? It would be best if you post a screenshot of your detailed network setup.
About VLAN 1, it is set as the management VLAN by default. You can change the management VLAN to any VLAN ID you want.
About the error message: "VLAN 1 : VLAN was not created by user" - it is a reminder that VLAN 1 cannot be edited.
Regards,
DaneA
NETGEAR Community Team
- QuantumnOct 02, 2017Aspirant
a. The class C is 192.168.111.0/24, same as VLAN4.
b. VLAN5 doesn't seem to have a class C range assigned in the switch, but yes the camera server and cameras are in the same class C, which is also the class C of the rest of the LAN in VLAN4.
c. Yes, connected diectly, as are all cameras.
d. I have a home server, Ubiquiti AP Pro (wifi), printer, and cameras, all connected directly to the GS728TP. Management of the GS is through my laptop, which connected wirelessly through the Ubiquiti.
VLAN1 for management is fine for me. I thought the Ubiquiti should be the only port in the management VLAN.
Somehow I had cleared the ports for the cameras in VLAN1. There is no 'U' or 'T' on those ports, they're blank. I haven't been able to set them back though nor make any other changes to VLAN1.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!