NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
VLAN not propagating to specific port on GS108T
I have a Netgate 1100 internet gateway. One of its ports is connected with a GS108PEv3, which powers three EnGenius WiFi access points and has a downstream GS108T connected to it. I cannot get connec...
DominikHoffmann please allow two comments and questions.
You talked of VLAN ID 5 and VLAN ID 6. For an access port, making one port untagged, it's not sufficient to assign it to the VLAN ID intended, you need to set the port PVID to assign untagged frames to the VLAN intended.
Completely confusing to the reader here is that you talked of configuring a VLAN 1. Can't see where or how that VLAN ID 1 is supposed to be used. What do you intend to achieve with this VLAN 1 config?
update: Re-reading shows the intention for VLAN 1 is having some ports assigned as untagged access ports for the VLAN 1. Is this VLAN 1 used as another network, like a generic network as available on an ISP router LAN port?
DominikHoffmann please allow two comments and questions.
You talked of VLAN ID 5 and VLAN ID 6. For an access port, making one port untagged, it's not sufficient to assign it to the VLAN ID intended, you need to set the port PVID to assign untagged frames to the VLAN intended.
Completely confusing to the reader here is that you talked of configuring a VLAN 1. Can't see where or how that VLAN ID 1 is supposed to be used. What do you intend to achieve with this VLAN 1 config?
update: Re-reading shows the intention for VLAN 1 is having some ports assigned as untagged access ports for the VLAN 1. Is this VLAN 1 used as another network, like a generic network as available on an ISP router LAN port?
schumaku: Thanks very much for responding. I have to admit, I am pretty new to VLANs. They fill me with fear and trepidation. Maybe, I have never come across a good explanation of the mechanics of tagging in switches.
Part of the problem is that the GS108Tv2, which is old, seems to do it differently from the GS108PEv3, where I have gotten it to work well. Maybe part of the problem is that the GS108Tv2 doesn’t do configuration according to 802.1Q, for which the GS108PEv3 has a separate tab.
The way I understand it, which is why I am happy for you to correct me, if I get this incorrectly, VLAN 1 is the ID on the basis of which the switch behaves like any unmanaged switch. I therefore made Port 6 on the GS108Tv2 neither tagged nor untagged for VLAN 1, because I don’t want that port to carry any of the untagged traffic.
I am applying to the GS108Tv2 what I learned from the GS108PEv3: On the GS108PEv3, all ports are untagged for VLAN ID 1. This leads me to conclude that if I make one of those ports neither tagged nor untagged, it will not receive any of the default untagged traffic.
On the GS108PEv3 I did not have to mess with the default PVID configuration to get it to behave the way I wanted to. Consequently, I didn't do anything with that set of configurations on the GS108Tv2, either.
I hope I did not make things more complicated with this explanation. Still lots of questions remain.
DominikHoffmann wrote:
Part of the problem is that the GS108Tv2, which is old, seems to do it differently from the GS108PEv3, where I have gotten it to work well. Maybe part of the problem is that the GS108Tv2 doesn’t do configuration according to 802.1Q, for which the GS108PEv3 has a separate tab.
Can't agree, the GS108Tv2 is not old from the technology view. Amazing Netgear has successfully teached the world that other configs are not 802.1q based VLANs. In German? Pustekuchen 8-) The GS108Tv2 has just added the Insight cloud management capabilities.
The Netgear Smart switches like the GS108Tv2 and so on are build on basic managed cores and allow configuring a management VLAN, while the Netgear Plus Switches are build on non-managed, but simply configurable platforms.
DominikHoffmann wrote:
I am applying to the GS108Tv2 what I learned from the GS108PEv3: On the GS108PEv3, all ports are untagged for VLAN ID 1.
it's just a special default configuration,
DominikHoffmann wrote:
This leads me to conclude that if I make one of those ports neither tagged nor untagged, it will not receive any of the default untagged traffic.Sure, this makes sense.
DominikHoffmann wrote:
On the GS108PEv3 I did not have to mess with the default PVID configuration to get it to behave the way I wanted to. Consequently, I didn't do anything with that set of configurations on the GS108Tv2, either.
Nothing difficult, not a steep learning curve involved The PVID defines the VLAN untagged frames sent into the port will be assigned to. sure, if all you ever need are port based VLANs, the simplified controls are sufficient.
schumaku wrote:
DominikHoffmann wrote:
This leads me to conclude that if I make one of those ports neither tagged nor untagged, it will not receive any of the default untagged traffic.Sure, this makes sense.
But the switch doesn’t appear to behave accordingly. I can’t get VLAN ID 5 to come out of Port 6 untagged.
DominikHoffmann wrote:
On the GS108PEv3 I did not have to mess with the default PVID configuration to get it to behave the way I wanted to. Consequently, I didn't do anything with that set of configurations on the GS108Tv2, either.
Nothing difficult, not a steep learning curve involved The PVID defines the VLAN untagged frames sent into the port will be assigned to. sure, if all you ever need are port based VLANs, the simplified controls are sufficient.
I don’t understand then, though, do I need to configure PVID, if I have done, what I did on the VLAN Membership section? Aren’t those competing configurations?
schumaku: Your hint to setting the PVID of the port from which I needed to untag default PVID 1 was the pointer in the right direction. I got it all working now.
This is my physical setup:
Port 1, 5, 7 and 8 are on untagged VLAN 1 ports.
These are my GUI configurations:
Again, the purpose is to tunnel my 192.168.1.0/24 subnet through a switch upstream from this GS108T, which is on my 192.168.2.0/24 subnet, to this one. I am using a VLAN 101 tag for that. This makes Ports 1, 4, 5, 7 and 8 essentially like an unmanaged switch that’s part of the 192.168.1.0/24 subnet. It also allows me to send VLAN 5 to Port 5, which makes it part of the 192.168.5.0/24 subnet, which is my guest network. I have hooked up my work computer to that, because I don’t want some IT guy from work being able to snoop around my personal setup. I work for a very large employer with very nebulous IT support.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
