NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
diehardbattery1
Apr 18, 2024Guide
MS510TXUP confused about VLAN for Guest Network
I have 3 WAX630E AP's connected to this switch, which connects to my firewall appliance. I am trying to setup a VLAN for guest network. I have created VLAN 10 on my firewall. The firewall is conne...
diehardbattery1
Apr 19, 2024Guide
So the problem seems to have gotten worse. I cannot access the GS752TPv2 at all now (neither local or Insight). I checked the firewall appliance running OPNSense. When creating a VLAN, a tag must be assigned (I assigned 10 for the guest network). I created VLAN 10 on the MS510TXUP, which is physically connected to igc1 on the appliance via port 7 (igc0 is WAN).
On the MS510TXUP, there are 3 WAX630E AP's (connected to ports 1-3) which I need both a normal wifi, and a guest wifi. On VLAN 10, ports 1-3 on the MS510TXUP are assigned trunk. Port 8 connects to a second switch (GS752TPv2, on port 48). This port currently does not have an assignment. Neither ports 7 or 8 are assigned to anything. The GS752TPv2 does not have any AP's connected to it and is only connected to the MS510TXUP because I thought that was the correct way of setting up. This is very confusing to me and I am at a loss on how to proceed (due to lack of knowledge on VLANs). I have no idea if this is setup correctly...
To note, my appliance has a total of 4 ports (igc2 and 3 are not currently used). Should I make each switch have its own physical connection?
schumaku
Apr 19, 2024Guru - Experienced User
How is this igc1 interface configured in relation to the VLANs?
Is there one (the primary LAN) untagged [the easy way for most inexperienced newbies], and just the guest VLAN 10 tagged?
Sure, if you manage to configure an additional port on the security appliance to deal to the same VLANs, this could simplify things.
Yes, networking can easy become difficult, especially when deploying various different equipment.
- diehardbattery1Apr 19, 2024Guide
igc1 is the main LAN port, no tag. The VLAN is a virtual interface with igc1 as it's parent. I believe that I somehow messed up the GS752TPv2's VLAN assignments I had at the time as I have also been troubleshooting this guest network issue already and was having trouble figuring out why I would lose it intermittently. I ended up factory resetting the GS752TPv2. Doing this eliminated the VLAN on that switch, leaving only the default ones, and everything started working. So now, do not have any VLAN assigned on the GS752TPv2, and have configured the ports on the MS510TXUP acording to the attached screenshot. So far, everything's been working, so I am hoping that I have stumbled on the correct configuration.
- schumakuApr 19, 2024Guru - Experienced User
The screenshot only shows VLAN 10 - assuming the tagged ports are serving the WAX6xx and/or the security appliance uplink. This does not say anything about the normal LAN resp VLAN (1?), where you might have Internet access as required for the Insight connection.
- diehardbattery1Apr 19, 2024Guide
I wanted to attach more screenshots, but apparently the limit is only 1, so I am providing a imgur link https://imgur.com/a/ORKfIG6. Hopefully this makes things more clear.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!