NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
[MS108TUP] - Switching - VLAN and routing
Hello everyone, I've this network configuration: Firewall --> MS108TUP --> Access Point Wifi The firewall and the AP is not a Netgear product. I've a domotic house so I've decided to separate the smart devices from the Main network. So in this case I've created an dedicated AP SSID with VLAN ID 20 only for manage smart devices. My network is also managed by a dedicated firewall device that manage VLAN Interfaces, WAN Interfaces, LAN Interfaces etc etc. Throught this Firewall, manage all the L2/L3 levels, from DHCP (one for every interfaces) to Privacy control, from Captive Portal (for Guests account) to Policy Control rule, ACL, Static route, QoS etc etc. So, I've configured the MS108TUP with several VLAN created in Switching mode (Switching --> VLAN). This is my current VLAN configuration on MS108TUP: MG1 is the Firewall uplink port, instead MG2 is the AP Uplink port. And this is the configuration of the interfaces into my Firewall: In this way, the AP create a SSID with VLAN 20, MG2 take the VLAN 20 and route it on MG1 VLAN 20; the firewall (MG1) take the VLAN 20 on port P2 and create it's own network with it's own dedicated DHCP and Static IPs list. All works good but when, from the firewall, I try to block traffic from/to the same interface/zone, not working. For example, if I try to block the SSH port from the tablet to my Raspberry PI and the tablet and the RPI is in the same interface/zone, the traffic is not blocked (my rule is: from DomoDevicesVLAN to DomoDevicesLAN source "tablet" destination "RPI" any service --> deny ----> this rule must deny the traffic for any service from the tablet to the RPI "using" the same zone but not work). Seems because the packet traffic is directly managed by the MS108TUP. Seems as the request is not passing throught the firewall, but remains at the switch level. For example: 192.168.0.5 --> 192.168.0.6 directly In this way the traffic is bypassing the firewall, because remain into the "switch" level Instead, how I can route the traffic thought the firewall? 192.168.0.5 --> 192.168.0.254 (Firewall interface) --> 192.168.0.6 In this way the traffic must pass into the firewall, and in this way I can have full-control on the packets and I can apply a Policy Control rule. Thank you so much Best Regards, ValerioSwitch GS752TPP rules ACLs creation problem
Hello, I'm having trouble assigning an ACL rule to the switch ports and I can't figure out what's missing in the configuration I'm trying to set up. The switch primarily serves an office (the switch is connected to the main one via a truck on two ports) where I have the same VLAN 20 on 45 ports. For that VLAN, I created an IP ACL with 11 sequences. My intention is to apply it to the ports with that VLAN, so in the "IP Binding Configuration" section, I selected ACL ID and started checking the relevant ports, but I can't get past 29 ports out of the 45 I should theoretically reach. How can I resolve this and configure it correctly so that the rules are applied to all ports affected by VLAN 20? I'm probably using the wrong approach. Can someone clarify? Thank you.GS110EMX & Livebox 7
Hi, sorry for my poor english but i need help... I recently got a Livebox 7 from french operator Orange with a 10gb port. I've an old GS110EMX given by a frien a few years before.When i received de Livebox, i thought i could connect it to the livebox with one of his two 10Gb ports, so i've buy cat6a and cat7 and cat8 cables to try. But it's not working : when i plug the cable connected to the 10gb port of the livebox to the GS110EMX port 9 or 10, the switch restart and restart and restart again in a kind of bootloop. I've waited a few minutes but the bootloop continues. When i connect the same cable to a port between 1 to 8 it works perfectly but a speed of 1gb, others object like my two NAS and laptop station witch are connected works also perfectly... I've tried to connect the livebox directly to my PC on a 2,5 gb port it works also... As this switch is manageable should i modify a parameter to link it to my livebox ? Thanks for anyone who can help me...ProSAFE 24-Port Gigabit PoE+ Smart Switch with 4 SFP Ports (GS728TPPv2)
i got this for my security cam system and I'm trying to know what port will give it internet so i can set it up it in the link/act mode and can find it on the app or by the ip address. i tried plugging to thought the net gear router and the comcast on and the network switch I'm using now and cant get any connection to just set it up ProSAFE 24-Port Gigabit PoE+ Smart Switch with 4 SFP Ports (GS728TPPv2)Auto Voice VLAN setup
We are looking to isolate our VoIP traffic to its own VLAN. For a number of reasons, we'd like this to happen without needing to configure each phone. It looks like Netgear switches support this. Unfortunately, the documentation is scattered and in many cases outdated. I'm hoping some folks here can show me where we're going wrong. Goals: Voice VLAN = 88. Ports 1-44 set to untagged VLAN 1 and VLAN 88. Default to 1 unless MAC address prefix matches a VoIP device. Ports 45-46 are for router for Voice-VLAN and has no access to VLAN 1. Ports 47-48 are for router normal VLAN (1) and has no access to VLAN 88. Ports 49-52 are uplinks and should carry traffic for both VLANs. The phone should be able to operate in pass-through mode, and devices behind them should default to VLAN 1 as they normally would. Currently I am facing two issues: When I plug in a phone with matching MAC prefix, it is not being pushed to VLAN 88. I'm unable to outright disable Voice-VLAN (88) on ports 47-48. I'll add some screenshots of the current config in a follow-up post. Hopefully some kind network admin will take a look and be able to spot where I'm going wrong.Connect 2 Prosafe GS748TPS over 150m
Hi, I'm trying to determine the best way to connect 2 Prosafe GS748TPS over a distance of around 150m or so. I've determined over some of the posts here already that I need to get a couple of AGM731F adapters and connect over the SFP port, but I'm not sure on which kind of cabling to use? Does anyone have any recommendations? Would OM3 be ok? Also, when connecting the two switches, will they automatically connect or with it need to be configured to extend the network? Will POE also still work on the second switch? Many thanks, NickInsight - Unable to register product - already registered
I have a GS724Tv4 switch. I am unable to Register my Product in Insight as it keeps saying "Serial Number already Registered". My device is registered in by NetGear account. It does show up in Insight as "waiting for first connect". When I go to the setting for the device is says the "Device is not registered" . Have tried to reboot everythign on the network as well as reset the switch to factory settings. Reading other discussions, I see others have had the problem but not seeing a solution. Any suggestions or feedback would be appreciated. Thanks. Michael
