ProSafe GS108Ev3 VLAN failure

[Gary12]

Below is my network setup.

Network Diagram

Gateway: Ubiquiti UniFi Security Gateway 3P (USG-3P)

Port 1: WAN (Internet)

Port 2: LAN (Trunk port, Untagged VLAN1 and tagged VLAN13 and VLAN15).

Laundry Room Switch:  Ubiquiti Networks US-8 UniFi 8-Port Gigabit PoE Compliant Managed Switch (US-8)

Port 1: Trunk Port as above

Port 3: Trunk Port as above

Office Switch: Ubiquiti Networks US-8-60W UniFi 8-Port Gigabit PoE Compliant Managed Switch (US-8-60W)

Port 1: Trunk Port

Port 6: Access Port (VLAN 13): IOT Device

Port 7: Access Port (VLAN 15): OTA Tuner/DVR.

Test 1: I inserted the Gigabit Plus Switch Series (GS108E) (GS108Ev3) (in default configuration) between the laundry room and office switches

Result: Pass

• IOT Device connected to internet.
• TV can connect to OTA Tuner.
• Laptop on GS108Ev3 connected to VLAN1.

Test 2: Enable advanced 802.1Q VLAN

Result: Pass

• IOT Device is NOT connected to internet.
• TV can NOT connect to OTA Tuner.
• Laptop on GS108Ev3 connected to VLAN1.

Test 3: Add VLAN13 and VLAN15 as tagged on all ports.

Result: Fail

• IOT Device is NOT connected to internet.
• TV can NOT connect to OTA Tuner.
• Laptop on GS108Ev3 connected to VLAN1.

Here is the switch VLAN configuration

I initially tried to create access ports, but this also failed.

For reference here is the switch information.

Do I have an error, or could the switch be faulty?

Thanks in advance

[Gary12 · Accepted solution]

I found the problem. The configuration of the VLANs on the Unifi router was different than the Netgear switch.

Subnet        

Subnet	VLAN Unifi	VLAN Netgear
192.168.13.0/24	3	13
192.168.14.0/24	4	14
192.168.15.0/24	5	15

After changing the VLAN on the Netgear switch, all tests pass!

Thanks everyone

[Retired_Member]

@Gary12 

You defined all your switchports as trunk ports. An access port should be an untagged member of a single VLAN and have its PVID set to the VLAN ID.

Port 6: Untagged in VLAN 13, PVID=13

Port 7: Untagged in VLAN 15, PVID=15

[Gary12]

For this test, I wanted the netgear switch to have only trunk ports. It is not passing tagged traffic. My question is why?

[Gary12]

I have tried what you suggested for access ports. It also fails to pass traffic. That is why I created a trunk only switch. It seams like all tagged traffic is dropped when VLAN support is enabled. What would cause that?

[Retired_Member]

@Gary12 

Well, I guess more tests need to be done. Simplify the configuration for that. Best, start with connecting the NETGEAR switch directly to the Unify gateway and use your laptop connected one by one to the access ports to each VLAN in the switch. I have never owned any Unify product, so I don’t know how they work with NETGEAR switches. However, I successfully used NETGEAR switches (802.1Q VLAN configured) with various D-Link, TP-Link, Netgate and CISCO VLAN-aware products.

[Gary12]

Thanks for your suggestion and help. I won't be able to test for 10 days as I am on vacation.

[Gary12 · Accepted solution]

I found the problem. The configuration of the VLANs on the Unifi router was different than the Netgear switch.

Subnet        

Subnet	VLAN Unifi	VLAN Netgear
192.168.13.0/24	3	13
192.168.14.0/24	4	14
192.168.15.0/24	5	15

After changing the VLAN on the Netgear switch, all tests pass!

Thanks everyone