NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

encore64's avatar
encore64
Aspirant
Aug 28, 2021

How to create a VLAN based on devices MAC adresse with the RAX200

Hello, I had a NETGEAR  R7000 router which was perfectly working for 6 years now and I recently had the opportunity to increase my ISP internet access from 100Mbs to 1Gbs but unfortunately my old go...
encore64's avatar
encore64
Aspirant
Aug 30, 2021

Hello Mr michaelkenward,

 

thanks for your answer.

 Did you reset the R7000 before you switched to the new service? You need to get it to forget any old settings.

No I haven't even tried this but when I search on internet about this probem I found other people having the same kind of issue (with download rated limited at ~300/400Mbs) and as I got this router since 6 years  now (which is almost a century in "IT years") I concluded that it was probabaly normal that my router was not supporting fully the Gigabit.

 

In fact the idea is to prevent somehow all these "TV-related" devices to access my private files stored on my NAS and therfore, I was tinking to put all these devices in a separate network not having access to my "normal" one.

 

but in fact you gave me an idea, if I cannot configure this using a VLAN I could perhaps reuse my old good R7000 and put all these TV devices on a separate physical e.g. 192.168.2.xxx LAN  (compared to the   192.168.1.xxx adresses range of my RAX200 ) so they should be isolated somehow from the rest of my home LAN devices....

 

Thanks again for your answers and the link, I will search if I found anything else about RAX200 VLAN configs before reusing my R7000 then .

 

Best regards,
Eric

michaelkenward's avatar
michaelkenward
Guru - Experienced User
Aug 30, 2021
encore64 wrote:

In fact the idea is to prevent somehow all these "TV-related" devices to access my private files stored on my NAS and therfore, I was tinking to put all these devices in a separate network not having access to my "normal" one.

 

I still don't understand how you expect things too be able to work if they are on separate network.

 

But my first move would be to find a way to isolate the files. In the NAS devices I use, you actually have to work hard to make files visible on the network.

 

Start from the files and work out how to protect them. Messing around with subnets and VPNs sounds a bit tortuous. I like to keep things simple.

 

 

 

  • encore64's avatar
    encore64
    Aspirant
    Sep 05, 2021

    Hello,

     

     thansk for your answer,  my NAS is not visible from the internet and accessible via Samba from my LAN with a login/password (with admin & guest account disabled) so it should be "sufficient" I guess to protect the files access I guess but in order to be 100% sure I would prefer to put some deviecs on a  separate network and that's why I was thinking that VLAn should be a nice solution for this kind of problem...

     

    in fact since my last answerI bought a NETGEAR GS308T manageable switch as I have read on the web that you can create VLAN based on MAC address with this switch.
    The VLAN creation with mac addresses is working fine as these VLAN devices are really isolated from my other network  but ... the "isolation" is too strong as they can even not see anymore my RAX200 router and therfore I have no internet access from these TV devices. ..
    I guess I have missed something in the configuration to connect this VLAN to the outside world  (still digging why it does not work)

     

    My idea was simply to isolate a few TV devices from the rest of my network so they do not see each other but nevertheless these TV devices should still have access to internet. 
    I tought that creating a VLAN was the solution for this simple problem  but apparently it seems that  I will have to take networking courses before being able to implement this at home :smileyhappy: