Configuration inter-vlan et routing

[GBInformatics]

Hello, I'm contacting you because I can't understand the graphic interface of a Cisco SG350-28MP. I have the command lines except that my fixed computer doesn't allow me to connect directly to the switch via console to configure it.

This is what I want to do.
Create Vlans (successful)
1 - Network equipment in 192.168.41.0/24 (gateway in 192.168.41.254)
2 - Servers in 192.168.42.0/24 (gateway in 192.168.42.254)
3 - Network peripherals in 192.168.43.0/24 (gateway in 192.168.43.254)
4 - Clients in 192.168.44.0/24 (gateway in 192.168.44.254)
5 - Lab servers in 192.168.45.0/24 (gateway in 192.168.45.254)
6 - Lab customers in 192.168.46.0/24 (gateway in 192.168.46.254)

I want the subnets to be able to communicate with each other.
I also want the pcs on vlan 4 to be able to receive the ip configuration of the dhcp server on vlan 2. I also want smartphones connected to a wifi terminal on vlan 1 to be able to receive the ip configuration of the dhcp server on vlan 2.

Because of my hardware, I have to use a router, in this case the cisco RV345P. My bay door is blocking the top part of the switch. In order to have more ports, I intend to use the ports of the cisco RV345P router.

Obviously, all the elements must have Internet access.
For the moment, only the nas in 192.168.42.1/24 must be accessible from the Internet to access DSM, for example.

Can you help me please ?

Thank you in advance

[Flavio Miranda]

@GBInformatics 

 Most of the configuration you need is on the two prints. First you need to create the vlans on the SG350 using the Plus button.

Create your vlans

Then, you can assign IP address to your vlans and you need to check the option "IPv4 Routing: ". with that config, you have almost everything you need.  VLANs will communicate between each other.

"I want the subnets to be able to communicate with each other."

check the option "IPv4 Routing:"

"I also want the pcs on vlan 4 to be able to receive the ip configuration of the dhcp server on vlan 2. I also want smartphones connected to a wifi terminal on vlan 1 to be able to receive the ip configuration of the dhcp server on vlan 2."

You need to enable DHCP relay and add a DHCP server.

"Because of my hardware, I have to use a router, in this case the cisco RV345P. My bay door is blocking the top part of the switch. In order to have more ports, I intend to use the ports of the cisco RV345P router."

I dont get you here. Are you going to use the CBS350 or the Router RV354P ?

"Obviously, all the elements must have Internet access.
For the moment, only the nas in 192.168.42.1/24 must be accessible from the Internet to access DSM, for example."

 Internet access does not depend on the switch only. On the switch side, you can create a static route sending all the traffic to your Internet gateway. You internet gateway need to handle the traffic towards the internet and do NAT(Network address translation)  for you.

Now, in order to a host connected to the CBS350 to be able to access the internet, it will depend how your internal network works. You can create a transit network netween your CBS350 and you internet gateway and add the static route I mentioned above.

For access from the Internet, will be more  complicate. This network 192.168.42.1/24 can not be accessible from the internet. You need to use a public IP address provided by your ISP and you need to have a NAT or PAT configured on your Internet gateway.

[GBInformatics]

Hello, the interface captured corresponds to that of my router and name to that of my switch, if it's possible to have the same as yours I'm interested.

I dont get you here. Are you going to use the CBS350 or the Router RV354P ?

> I'm going to use both. At the moment I'm only using the SG350-28MP.

[Flavio Miranda]

@GBInformatics 

   Just follow the steps I mentioned above and you can make it.

[GBInformatics]

I've done everything as you explained but I've just realised that I can't even get access to machines on the same network.

I must have misconfigured the port that connects the router to the switch.

[Flavio Miranda]

To have access from machines connected to the CBS350, you dont need the router. The CBS350 is able to do inter-vlan routing.

If you enable the option I highlighted above.

[GBInformatics]

I'm making progress, I'm getting access to the different vlans and I'm getting access to the internet. DHCP remains

[Flavio Miranda]

Good.

 For DHCP you need to play with the DHCP relay feature.

DHCP is broadcast, so it will not cross amond layer3 interfaces vlans. You need to use relay.

[GBInformatics]

I put this 

Properties

DHCP relay :

Enable

DHCP Snooping

DHCP Snooping Status: Disable

Option 82 Pass Through: Disable

Verify MAC Address: Disable

Database Backup : Disable

DHCP Relay Server Table DHCP Server IP Address

192.168.42.1

[Flavio Miranda]

Try to enable DHCP snooping. And put the interface where the DHCP server is connect as trust

You can also use the Switch as DHCP server

[GBInformatics]

For DHCP, you're on your own as it's not the switch that's my DHCP server but my nas. For me, it should not be activated.

I really don't understand the cisco interface...

[Flavio Miranda]

But you can deactivate it.

[GBInformatics]

I want to use DHCP on my nas.

[GBInformatics]

I'm wondering if it isn't blocked because the wifi terminal has a fixed ip on vlan1.

[GBInformatics]

error