NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
MainMa
Jan 09, 2021Aspirant
How to prevent packets from being seen from devices which belong to other VLANs?
Hello. I configured my GS516TP switch to use VLANs. There are currently three VLANs: VLAN 10, 11, and 12, with three devices, 10.0.10.5, 10.0.11.5, and 10.0.12.5 connecting respectively through port...
- Jan 10, 2021
Honestly, both answers were based on the experience of several users as well as on own experimenting. I'm still confused why Netgear does have the UI allowing these configurations all over on the Smart Managed Plus and Pro, while adding complexity for the administration if truly not workable and supported.
For your test - please ensure you are using IP addresses from a single subnet (I still suspect you might not as per my comments above). this is essential as there is no router, and the connections are within one single network.
schumaku
Jan 10, 2021Guru - Experienced User
By 802.1q definition, each VLAN is an independent network, and has it's own broadcast domain - and can't see or access any other VLAN.
What you are trying to achieve is a so called asymmetric L2 VLAN.
Ensure there is no membership on any port for VLAN 1 (empty).
The port 10 (VLAN 10) must be set to PVID 10.
The port 11 (VLAN 11) must be set to PVID 11.
The port 12 (VLAN 12) must be set to PVID 12.
If using three different IPv4 subnets like 10.0.x.x/24 no routing will happen. for such a set-up, all systems must be in the same IPv4 subnet. Said this, an kind of ARP requests or IPv4 broadcasts must be visible on all ports.
- MainMaJan 10, 2021Aspirant
This is very much the configuration I have right now: no memberships on any port for VLAN 1, the three PVIDs are also set correctly for the three ports.
While searching for the solution, I found https://community.netgear.com/t5/Smart-Plus-and-Smart-Pro-Managed/GS308E-Smart-Managed-Plus-VLAN/td-p/1908262, which describes the exact same problem, and the answer seems to indicate that the asymmetric VLANs are not supported by GS308E (nor does GS108E, according to https://community.netgear.com/t5/Smart-Plus-and-Smart-Pro-Managed/GS108Ev3-Multi-Port-Based-VLAN-technical-details/td-p/1786173). How do I know if they are supported by GS516TP?
- schumakuJan 10, 2021Guru - Experienced User
Honestly, both answers were based on the experience of several users as well as on own experimenting. I'm still confused why Netgear does have the UI allowing these configurations all over on the Smart Managed Plus and Pro, while adding complexity for the administration if truly not workable and supported.
For your test - please ensure you are using IP addresses from a single subnet (I still suspect you might not as per my comments above). this is essential as there is no router, and the connections are within one single network.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!