NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
GS108E challenges
I'm taking my first steps with a Big Boy network, hoping to set up 4 VLANs behind OpnSense. However, I seem to be stumbling at the fundamental step of getting the switch working.
Words of wisdom - or condolence - would be much appreciated.
Model is GS108Ev4, firmware is V1.0.1.9. All cables are known good, and have been rotated with other known good cables. Switch has been factory reset prior to firmware upgrade.
Network is laptop (192.168.1.46) - port 6 : GS108E (192.168.1.3) : port 8 - OpnSense (192.168.1.1). Network works as expected when all ports are in access mode, or when the GS108E is swapped out for a GS308.
1) First problem - the trunk shuffle! (little reference for the older folk here).
a) Using a basic VLAN, set port 8 ( to the router) to 'Access' :
$ ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.543 ms
64 bytes from 192.168.1.1: icmp_seq=2 ttl=64 time=0.688 ms
64 bytes from 192.168.1.1: icmp_seq=3 ttl=64 time=0.646 ms
a) Set port 8 to 'Trunk (uplink)'
$ ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
From 192.168.1.46 icmp_seq=17 Destination Host Unreachable
From 192.168.1.46 icmp_seq=21 Destination Host Unreachable
From 192.168.1.46 icmp_seq=22 Destination Host Unreachable
From 192.168.1.46 icmp_seq=23 Destination Host Unreachable
As I understand it, a trunk port will pass all tagged and untagged packets without modification. So why is the port blocking all packets?
2) 'Communication Error.'
So, then I tried the Advanced VLAN. My steps were :
a) Click 'SWITCHING' -> 'VLAN' -> 'Advanced 802.1Q VLAN' -> 'ACTIVATE MODE', and continue past warning.
b) Click 'APPLY'.
I get a modal 'Advanced 802.1Q VLAN Communication Error.'. Other than a few CSS or JavaScript warnings and errors (all presentational as far as I can tell), there's nothing in the console.
How do I resolve this error? It crops up whenever I click the Apply button, regardless of what config changes I've made.
3) Back to Basic 802.1Q VLAN.
a) Create new VLAN 'IoT', tag 10.
b) Set port 6 (the laptop) to this VLAN.
Now I can't even ping the switch!
$ ping 192.168.1.3
PING 192.168.1.3 (192.168.1.3) 56(84) bytes of data.
From 192.168.1.46 icmp_seq=10 Destination Host Unreachable
From 192.168.1.46 icmp_seq=11 Destination Host Unreachable
From 192.168.1.46 icmp_seq=12 Destination Host Unreachable
I... what? Surely setting a VLAN wouldn't lock me out from the management page?
Either everything ever written about VLANs is wrong, or I'm an idiot. You, the viewer, decide!
3) Back to Basic 802.1Q VLAN.
a) Create new VLAN 'IoT', tag 10.
b) Set port 6 (the laptop) to this VLAN.
Now I can't even ping the switch!
$ ping 192.168.1.3
PING 192.168.1.3 (192.168.1.3) 56(84) bytes of data.
From 192.168.1.46 icmp_seq=10 Destination Host Unreachable
From 192.168.1.46 icmp_seq=11 Destination Host Unreachable
From 192.168.1.46 icmp_seq=12 Destination Host Unreachable
I... what? Surely setting a VLAN wouldn't lock me out from the management page?On the OPNsense adapter intended for the trunk, all the (four?) VLAN are [T]agged - or is there one VLAN [U]ntagged? In my experience, and here in the community, the majority of such issues are caused by the big, powerful firewall applinaces.
Scratch the Basic Dot1q approach - like this you can either define a port as Access Port [U]ntagged and the matching PVID, or as a Trunk Port (all [T]agged).
I'd suggest to use the advanced VLAN config instead. Properly configure access port #6 for the VLAN 10 as [U] and the PVID is set correct to 10 for the port #6? And on the port for the trunk, you can use one VID [U]ntagged with the appropriate same PVID.
2) 'Communication Error.'
So, then I tried the Advanced VLAN. My steps were :
a) Click 'SWITCHING' -> 'VLAN' -> 'Advanced 802.1Q VLAN' -> 'ACTIVATE MODE', and continue past warning.
b) Click 'APPLY'.
I get a modal 'Advanced 802.1Q VLAN Communication Error.'. Other than a few CSS or JavaScript warnings and errors (all presentational as far as I can tell), there's nothing in the console.
How do I resolve this error? It crops up whenever I click the Apply button, regardless of what config changes I've made.Factory default the GS108E, and restart from scratch, enabling the Advanced mode, ...
Have deployed the current GS308E v1.00.11 firmware?
Using some "exotic" browser, or an industry standard Chrome or Firefox?
5 Replies
3) Back to Basic 802.1Q VLAN.
a) Create new VLAN 'IoT', tag 10.
b) Set port 6 (the laptop) to this VLAN.
Now I can't even ping the switch!
$ ping 192.168.1.3
PING 192.168.1.3 (192.168.1.3) 56(84) bytes of data.
From 192.168.1.46 icmp_seq=10 Destination Host Unreachable
From 192.168.1.46 icmp_seq=11 Destination Host Unreachable
From 192.168.1.46 icmp_seq=12 Destination Host Unreachable
I... what? Surely setting a VLAN wouldn't lock me out from the management page?On the OPNsense adapter intended for the trunk, all the (four?) VLAN are [T]agged - or is there one VLAN [U]ntagged? In my experience, and here in the community, the majority of such issues are caused by the big, powerful firewall applinaces.
Scratch the Basic Dot1q approach - like this you can either define a port as Access Port [U]ntagged and the matching PVID, or as a Trunk Port (all [T]agged).
I'd suggest to use the advanced VLAN config instead. Properly configure access port #6 for the VLAN 10 as [U] and the PVID is set correct to 10 for the port #6? And on the port for the trunk, you can use one VID [U]ntagged with the appropriate same PVID.
2) 'Communication Error.'
So, then I tried the Advanced VLAN. My steps were :
a) Click 'SWITCHING' -> 'VLAN' -> 'Advanced 802.1Q VLAN' -> 'ACTIVATE MODE', and continue past warning.
b) Click 'APPLY'.
I get a modal 'Advanced 802.1Q VLAN Communication Error.'. Other than a few CSS or JavaScript warnings and errors (all presentational as far as I can tell), there's nothing in the console.
How do I resolve this error? It crops up whenever I click the Apply button, regardless of what config changes I've made.Factory default the GS108E, and restart from scratch, enabling the Advanced mode, ...
Have deployed the current GS308E v1.00.11 firmware?
Using some "exotic" browser, or an industry standard Chrome or Firefox?
I'll try your solution, but I don't know if my changes are being processed because 'Communication Error'. I'll keep plugging away, though.
the majority of such issues are caused by the big, powerful firewall applinaces.
I'm not sure my packets are even getting into the switch, let alone the firewall!
Huh. Setting a static IP as if the laptop were in the VLAN allows me to ping the firewall (the VLAN gateway is 192.168.10.1). So... the initial DHCP request or response is being mangled?
I dunno. I'm just banging rocks together, here.
A few moments later...
Progress! You were right about the firewall. While I had DHCP set up for the VLAN, it wasn't listening on the VLAN interface!
Thank you for the solution!
If you have any thoughts about problem 2), I'll gladly listen!
If you have any thoughts about problem 2), I'll gladly listen!
As asked before:
Have deployed the current GS308E v1.00.11 firmware?
Have deployed the current GS308E v1.00.11 firmware?
Uh... is that recommended? Google isn't throwing up any instances of this.
Factory default the GS108E, and restart from scratch, enabling the Advanced mode, ...
I've tried this. Factory reset, update firmware (GS108E only), try to apply settings.
Using some "exotic" browser, or an industry standard Chrome or Firefox?
I've tried Firefox with extensions, Firefox in safe mode, and Vivaldi (Chromium derivative) on Win 10, and Firefox with no extensions on Fedora.
Sorry, I could've sworn this part of your answer wasn't here before. I'm not ignoring you!
Sorry, I could've sworn this part of your answer wasn't here before. I'm not ignoring you!
Hyperactive, sometimes updating (extending) my earlier replies. Sorry for any confusion caused 8-)
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
