NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Suggestion needed for nas media server on lan with vlan
I guess this would apply to any of the basic RN units with two NICs.
I have several of the "smart" devices installed around the house and I don't really trust any are secure. I'd like to put all th...
StephenB wrote:
Are you using the same IP address range for both VLANs (e.g., 192.168.1.x)?
In addition to setting up the switch port connected to NIC2 as a vlan, you likely also need to use a different IP address range for the VLAN (for instance 192.168.2.x)
No, VLAN and LAN have different ranges..
THE idea was NAS NIC1 used the LAN address, say 192.168.1.x, and configure NAS NIC2 to use VLAN @ 192.168.2.x. That's how I configured it and the problem was I couldn't address the NAS through NIC2 when connected to the VLAN. I could switch back to the LAN and reach the NAS on NIC1.
That said, I'm not sure if this is a good way to do this or if there is some better way.
iceweasel wrote:
That said, I'm not sure if this is a good way to do this or if there is some better way.
I think it is part of what you need to do.
One variation you could try -
- set up NIC-1 as the 192.168.2.x static address and put it on the VLAN in the swtich. leave the gateway field blank.
- set up NIC-2 as the 192.168.1.x (DHCP), and put it on the LAN in the switch.
The idea here is that NIC-1 will get priority over NIC-2, so 192.168.2.x traffic will be transmitted on NIC-1. But since the gateway is blank, linux should use NIC-2 for xmit internet/LAN traffic, instead of sending it to NIC-1's gateway.
However, I am wondering about the rationale here. If you don't trust a device enough to allow it access to your PCs and mobile devices, then can you really trust it with access to the data on your NAS?
@StephenB wrote:
However, I am wondering about the rationale here. If you don't trust a device enough to allow it access to your PCs and mobile devices, then can you really trust it with access to the data on your NAS?
Great point, but in this case the NAS contains only unsecure stuff or at least stuff I don't really care if it's exposed in some sense. I thought this would be easire to admininster but it may not be. I'll give your suggestion a try, I like the idea of no gateway and will check how that works.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
