NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

mrmabmn's avatar
mrmabmn
Aspirant
Aug 18, 2017
Solved

GS510TLP inter vlan

How do you configure the GS510TP for inter vlan communication.

 

 I am new to VLANs, I have a single GS510TPL.  How do I configure 3 VLAN to create 3 separate networks which can communicate on the single GS510TPL switch. Would be nice to provide internet access.  I cannot tell step by step how to do this.   Not sure whether to use General or Trunk, Tag or Untagged.   

I am creating 3 VLANs on the GS510TP
VLAN 1 = default 192.168.1.254 on Port 1
VLAN 10 = 192.168.0.250 =Ports 2-4
VLAN 20 =172.16.20.250 = Ports 5-7
VLAN 30 = 192.168.77.250= Port 8

How should the ports be configured so the hosts on the VLANs can communicate with each other.   I keep reading the inter vlan should happen automagically, but it is not happening.

  • Hi,

     

    I have tried to outline for you, what you need to do.

     

    1. You must add an IP addresses to each of your VLAN interfaces under "Routing" --> "VLAN" --> "VLAN Routing". You have to create the VLANs first. I think you have already do this?

     

    2. Static routes needs to be done on your Internet router for Internet access to these VLANs. You need static on your router so that the router can be made aware of the networks on the switch.

     

    3. You need a DHCP server in each VLAN as your switch does not support DHCP relay from what I know. You cannot do the DHCP from the router as it will not be aware of the VLANs on your switch and the switch itself can't do DHCP server either, I think. The alternative is of course static IP addresses. That will work, but that is a pain for a large network.


    Here is an example of a config. I am using your 3 VLANs for explanation + a VLAN used for routing to the Internet (VLAN 99). I have left VLAN 1 alone here.
    VLAN 10 = 192.168.0.0 /24
    VLAN 20 =172.16.20.0 /24
    VLAN 30 = 192.168.77.0 /24
    VLAN 99 = 192.168.99.252 /30

     

    Router IP: 192.168.99.254 /30

     

    Switch VLAN interface IPs (set these under: "Routing" --> "VLAN" --> "VLAN Routing").
    Routing VLAN 99 IP: 192.168.99.253 /30
    VLAN 10 IP: 192.168.0.250 /24
    VLAN 20 IP: 172.16.20.250 /24
    VLAN 30 IP: 192.168.77.250 /24

     

    - Go to the routing table of the switch ("Routing" --> "Routing Table") and set the default gateway for the switch to: 192.168.99.254
    - Turn on "Routing Mode" on the switch, under "Routing" --> "IP".
    - Devices in VLAN 10 must have and IP of 192.168.0.x, with a default gateway address of: 192.168.0.250
    - Devices in VLAN 20 must have and IP of 172.16.20.x, with a default gateway address of: 172.16.20.250
    - Devices in VLAN 30 must have and IP of 192.168.77.x, with a default gateway address of: 192.168.77.250
    - On the switch port that connects to the router, you want to untag that port for VLAN 99 and set a PVID of 99.
    - On the switch ports that connects to VLAN 10 common non VLAN-aware devices, you want to untag those ports for VLAN 10 and set PVID of 10.
    - On the switch ports that connects to VLAN 20 common non VLAN-aware devices, you want to untag those ports for VLAN 20 and set PVID of 20.
    - On the switch ports that connects to VLAN 30 common non VLAN-aware devices, you want to untag those ports for VLAN 30 and set PVID of 30.

     

    On the router you need to set static routes back to the subnets that the router is not aware of: 192.168.0.0 /24 and 172.16.20.0 /24 and 192.168.77.0 /24

     

    So, three static routes in total on the router. They should look like this.

    Destination network: 1192.168.0.0
    Subnet mask: 255.255.255.0
    Gateway/Router/Next Hop: 192.168.99.253

     

    Destination network: 172.16.20.0
    Subnet mask: 255.255.255.0
    Gateway/Router/Next Hop: 192.168.99.253

     

    Destination network: 192.168.77.0
    Subnet mask: 255.255.255.0
    Gateway/Router/Next Hop: 192.168.99.253


    Hope that makes sense. Else let me know :)


    Cheers

33 Replies

  • Hi,

     

    I have tried to outline for you, what you need to do.

     

    1. You must add an IP addresses to each of your VLAN interfaces under "Routing" --> "VLAN" --> "VLAN Routing". You have to create the VLANs first. I think you have already do this?

     

    2. Static routes needs to be done on your Internet router for Internet access to these VLANs. You need static on your router so that the router can be made aware of the networks on the switch.

     

    3. You need a DHCP server in each VLAN as your switch does not support DHCP relay from what I know. You cannot do the DHCP from the router as it will not be aware of the VLANs on your switch and the switch itself can't do DHCP server either, I think. The alternative is of course static IP addresses. That will work, but that is a pain for a large network.


    Here is an example of a config. I am using your 3 VLANs for explanation + a VLAN used for routing to the Internet (VLAN 99). I have left VLAN 1 alone here.
    VLAN 10 = 192.168.0.0 /24
    VLAN 20 =172.16.20.0 /24
    VLAN 30 = 192.168.77.0 /24
    VLAN 99 = 192.168.99.252 /30

     

    Router IP: 192.168.99.254 /30

     

    Switch VLAN interface IPs (set these under: "Routing" --> "VLAN" --> "VLAN Routing").
    Routing VLAN 99 IP: 192.168.99.253 /30
    VLAN 10 IP: 192.168.0.250 /24
    VLAN 20 IP: 172.16.20.250 /24
    VLAN 30 IP: 192.168.77.250 /24

     

    - Go to the routing table of the switch ("Routing" --> "Routing Table") and set the default gateway for the switch to: 192.168.99.254
    - Turn on "Routing Mode" on the switch, under "Routing" --> "IP".
    - Devices in VLAN 10 must have and IP of 192.168.0.x, with a default gateway address of: 192.168.0.250
    - Devices in VLAN 20 must have and IP of 172.16.20.x, with a default gateway address of: 172.16.20.250
    - Devices in VLAN 30 must have and IP of 192.168.77.x, with a default gateway address of: 192.168.77.250
    - On the switch port that connects to the router, you want to untag that port for VLAN 99 and set a PVID of 99.
    - On the switch ports that connects to VLAN 10 common non VLAN-aware devices, you want to untag those ports for VLAN 10 and set PVID of 10.
    - On the switch ports that connects to VLAN 20 common non VLAN-aware devices, you want to untag those ports for VLAN 20 and set PVID of 20.
    - On the switch ports that connects to VLAN 30 common non VLAN-aware devices, you want to untag those ports for VLAN 30 and set PVID of 30.

     

    On the router you need to set static routes back to the subnets that the router is not aware of: 192.168.0.0 /24 and 172.16.20.0 /24 and 192.168.77.0 /24

     

    So, three static routes in total on the router. They should look like this.

    Destination network: 1192.168.0.0
    Subnet mask: 255.255.255.0
    Gateway/Router/Next Hop: 192.168.99.253

     

    Destination network: 172.16.20.0
    Subnet mask: 255.255.255.0
    Gateway/Router/Next Hop: 192.168.99.253

     

    Destination network: 192.168.77.0
    Subnet mask: 255.255.255.0
    Gateway/Router/Next Hop: 192.168.99.253


    Hope that makes sense. Else let me know :)


    Cheers

    • mrmabmn's avatar
      mrmabmn
      Aspirant

      Quick question, 

       

      If my internet router has the IP address of 192.168.1.1, can I make VLAN99 192.168.1.251?

      • Hopchen's avatar
        Hopchen
        Prodigy

        Hi again,

         

        Yes, you can make VLAN 99 whatever IP scheme you want. Just make sure that the router's IP is in the same subnet as the VLAN 99 interface on the switch. And if you change the VLAN 99 IP scheme from what I suggested, then you need to make adjustments in the static routes, etc.

         

        Also, note that you currently use 192.168.1.x for VLAN 1 on the switch. The switch won't allow you to use the same subnet for two different VLAN interfaces, so you would need to change the VLAN 1 IP scheme to something else before you can assign 192.168.1.x to VLAN 99.

         

        BTW, the reason I introduce VLAN 99 in the first place is because I believe that these smart switches won't allow VLAN 1 to be part of routing. Probably because it is considered a management VLAN not to be routed amongst other VLANs.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More