I'm trying to reconfigure my home network ahead of a fiber install next week. My goal is to connect my Netgear switch to my Unify Dream Machine Pro Max via a 10G DAC (port 10 on the switch) and to my Wifi AP on the 2.5 gig port 1 of the switch. I have my network segregated into five (5) VLANs (1 Management, 2 Secure, 3 Guest, 4 IoT, 5 Cameras) and I can't seem to get my port configuration correct. I think I want to assign ports 1 and 10 (to the AP and Gateway) as Trunk Ports but as soon as I do Insight loses its Uplink Port. If I plug in another cable from the gateway and unplug port 10 it reconnects and the "Uplink" switches to port 8 (the newly plugged in port). When I then reconnect port 10 it takes over as the uplink and the router blocks port 8, IIRC having 2 lines connected between the same devices can cause a loop/flood so I can kind of understand why it would do that.
So, if assigning port 10 as a trunk for all of my VLANs kills the uplink to Insight how do I configure the ports to Trunk my VLANs from Gateway-->Switch-->AP while maintaining an uplink to Insight? Is there a way to permanently assign port 8 (or another port) to the cloud uplink while allowing the trunk ports between all three devices?
I eventually intend to move my PC and some storage over to the switch but I can't until I figure out how to get all three devices talking to each other properly.
Update: I just partially answered my own question by digging through YouTube and finding STP and RSTP 🤦🏻. I still want port 10 to trunk my VLANs over to the gateway but when I configure it to tag all VLANs on this port I still lose my link to Insight. 🤔
It seems I can configure the uplink port to access all 5 of my VLANs but I can only tag 4, if I tag the management VLAN it drops my connection to Insight.
It seems I can configure the uplink port to access all 5 of my VLANs but I can only tag 4, if I tag the management VLAN it drops my connection to Insight.
Does that VLAN - permitting the switch and the rest of the infrastructure is correctly configured for that VLAN - allow to reach the Internet?
I currently have the router/gateway configured for the same VLANs and until I have the time this weekend to set firewall rules all of the ports on the Unifi are set to "allow all". The WAN port is set to Native VLAN 1 but I don't think I can tag it for outgoing traffic. This could be the issue I presume?
Apologies, I'm not an enterprise user. I am a Mech. E with an itch for smart home automation. I don't know networking very well and I'm just trying to secure what I can (IoT, Cameras). I may not know all of the terminology. 😅
