VLAN1 and GS108Ev3

Question

I have a few Netgear GS108Ev3 switch connected together with tagged ports.

1) Is it ok to turn off VLAN 1 on all the ports and untag the VLANs I want to come thru on each port?

2) Can I connect a Cisco switch to the GS108Ev3 on a port where all the VLANs are set to tagged? Passing all the VLANs to a trunk port on the Cisco? Do I have to have VLAN 1 active for this to work?

schumaku · Answer

NasKar&nbsp;wrote:I have a few Netgear GS108Ev3 switch connected together with tagged ports.802.1q mode one might guess here.&nbsp;NasKar&nbsp;wrote:1) Is it ok to turn off VLAN 1 on all the ports and untag the VLANs I want to come thru on each port?Yes, of course.&nbsp;&nbsp;NasKar&nbsp;wrote:2) Can I connect a Cisco switch to the GS108Ev3 on a port where all the VLANs are set to tagged?Sure, create all the VLANs required and configure the port (for the trunk) to be tagged.&nbsp;NasKar&nbsp;wrote:Passing all the VLANs to a trunk port on the Cisco?Done as per the above.&nbsp;NasKar&nbsp;wrote:Do I have to have VLAN 1 active for this to work?Definewhat you understand as "have VLAN 1 active".&nbsp;&nbsp;

NasKar · Answer

&nbsp;Thanks for the reply.&nbsp; I didn't get a email that you responded. Sorry about the late reply.&nbsp;I think I finally have it working.&nbsp; Can ping on all the devices on VLAN 5 from the computer connected to Cisco switch on untagged port VLAN5.The Native Vlan on the trunk port of the Cisco has to be VLAN5 and the PVIDs for all the ports on the netgear have to be on 5 as well.&nbsp;So the PVID is equivalent to Cisco Native VLAN?

schumaku · Answer

NasKar&nbsp;wrote:So the PVID is equivalent to Cisco Native VLAN?Half of it. Netgear has some design allowing the config of asymmetrical VLANs (breaking the 802.1q common understandings). There are two controls affected: The setting of the port to (one on the 802.1q context!) [U]natagged VLAN participation defining which VLAN frames are flowing out of the switch untaggged, and the PIVD which does define the VLAN untagged incoming frames to the switch will be assigned to.&nbsp;&nbsp;

NasKar · Answer

Very confusing. Both switches are using the 802.1q standard.1) My understanding is the native Vlan must match on both sides of the trunk of it to work.2) it's best to not have any data going over the native vlan&nbsp;Can you confirm if I'm setup correctly?&nbsp; Vlan 99 will be the native vlan without dataon the Netgear GS108Ev3 with trunk on ports 1,2 and 6 and 3-5 and 7-8 untagged for VLAN 5.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1&nbsp; 2&nbsp; 3&nbsp; 4&nbsp; 5&nbsp; 6&nbsp; 7&nbsp; 8Vlan 1Vlan 5&nbsp; &nbsp;T&nbsp; T&nbsp; U&nbsp; U&nbsp; U&nbsp; T U&nbsp; UVlan10&nbsp; T&nbsp; T&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; TVlan 99 U&nbsp; U&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; UPVID&nbsp; &nbsp; 99 on ports 1,2,6 and 5 on ports 3,4,5,7,8CiscoOn the trunk port select Native Vlan as 99&nbsp;If my setup is incorrect hopefully you can show me what corrections to make.

schumaku · Answer

Appears you hang on with the decades old (Cisco!) problem (read implementaion issue and old old switch hardware limitation) for not using native VLAN1 which is still often mentioned as best policy all over the the net. It happened back then that the native VLAN 1 was leaking over different other VLANs. Later on, bad guys could use a untagged port to inject tagged frames...&nbsp;NasKar&nbsp;wrote:Very confusing. Both switches are using the 802.1q standard.Can't see any confusion. Untagged frames re untagged frames - these are not part of dotQ.&nbsp;NasKar&nbsp;wrote:1) My understanding is the native Vlan must match on both sides of the trunk of it to work.Best policy of course, to avoid errors and confusion. Technically you can run the VLAN AB on one switch, expose this as an untagged/PVID (native if you want) on port, and on the adjacent switch you can bring these frames to VLAN XY, by&nbsp;configuring the link port to use the VLAN AB untagged, and PVID AB. The untagged frames don't indicate any VLAN. This is sometimes done when merging businesses and networks FWIW.&nbsp; On the other end of the switch feature scale, there is even VLAN translation available.&nbsp;NasKar&nbsp;wrote:2) it's best to not have any data going over the native vlanJust yet another policy or rule of thumb ...no real technical reason, just a legacy issue...&nbsp;NasKar&nbsp;wrote:Can you confirm if I'm setup correctly?&nbsp; Vlan 99 will be the native vlan without dataon the Netgear GS108Ev3 with trunk on ports 1,2 and 6 and 3-5 and 7-8 untagged for VLAN 5.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1&nbsp; 2&nbsp; 3&nbsp; 4&nbsp; 5&nbsp; 6&nbsp; 7&nbsp; 8Vlan 1Vlan 5&nbsp; &nbsp;T&nbsp; T&nbsp; U&nbsp; U&nbsp; U&nbsp; T U&nbsp; UVlan10&nbsp; T&nbsp; T&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; TVlan 99 U&nbsp; U&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; UPVID&nbsp; &nbsp; 99 on ports 1,2,6 and 5 on ports 3,4,5,7,8CiscoOn the trunk port select Native Vlan as 99&nbsp;&nbsp;Perfectly fine.&nbsp;So at this point would you mind to tell us what advantage you have from using VLAN 99 instead of VLAN 1 now for the native VLAN?&nbsp;

Forum Discussion

VLAN1 and GS108Ev3

5 Replies

Related Content

GS108Ev3 not accessible

GS108Ev3 LLDP

ProSafe GS108Ev3 VLAN failure

GS108Ev3 Port Trunking

GS724Tv4 Vlan1 IGMP Snooping

NETGEAR Academy

ProSupport for Business