Hello,
I don’t understand the working of the RV320 or might have over read it in the manual. I would like to draw you an example of my network, so it might be easier for to understand my needs / wishes and give me some advice.
Let’s start with the network:
I’ve been assigned a static IP by my ISP. There is a DMZ and a couple of internal subnets connected to the RV320 through another gateway, which should be reachable from DMZ hosts and by VPN connections from the internet to the RV320. Internal L3 switch uses VLAN tags.
Let’ use these addresses for example:
ISP assigned subnet: 192.10.11.12.12/30 (255.255.255.252)
ISP router address (ISP box in my house): 192.10.11.13
My static IP assigned by ISP: 192.10.11.14
My self-assigned DMZ subnet: 192.168.2.0/24
RV320 IP setup:
IP 192.168.1.1 (/24 subnet, VLAN 1; nothing else will be in this subnet; this preconfigured IP address and subnet can stay; it will only be used if I misconfigure the RV to have a last resort for directly connected access)
RV320 may not do any DHCP except for the preconfigured 192.168.1.0 subnet and the Guest WLAN (see below)
RV320 must be manageable from one or more internal subnets and through VPN
RV320 must have firewall turned on and block unwanted traffic from internet
My internal “transit subnet”:
192.168.3.0/24, VLAN 3
- (internal) LAN interface of RV320: 192.168.3.254
- gateway interface to internal subnets: 192.168.3.1
Transit network for connecting the internal interface of the RV320 to the internal gateway. No other hosts / IPs in this subnet. All other internal networks are behind the internal gateway 192.168.3.1.
192.168.3.254 (VLAN 3) should be reachable through LAN 1-3 interfaces on the RV320, LAN 4 is for the preconfigured 192.168.1.1 (VLAN 1)
My guest WLAN:
Guests can access a Guest WLAN (192.168.66.0/24), which is encapsulated in it’s own VLAN 666. The RV320 should serve DHCP in this subnet, have an own IP address in this subnet (192.168.66.1) an be the default router for this subnet.
My internal subnets:
-in all subnets .1 is set as the default gateway and this address is a VLAN interface on the L3 switch
- the default gateway on the L3 switch is set to 192.168.3.254 (RV320 address)
192.168.11.0/24, gw 192.168.11.1, VLAN 11
192.168.12.0/24, gw 192.168.12.1, VLAN 12
192.168.13.0/24, gw 192.168.13.1, VLAN 13
I assume my setup should be:
Internet ----- ISP box ----- RV320 (WAN1)
192.10.11.13 192.10.11.14
+
+
RV320 (LAN) ----- L3 Switch
192.168.3.254 192.168.3.1
+
+
L3 switch ----- internal subnets
192.168.1x.1
Working mode
Should the RV320 be running in Gateway or Router mode? I don’t get the difference for I understand that in Router mode the firewall can be turned off – but it could also stay on.
Port Management
VLAN 3 untagged membership : LAN ports 1-3
VLAN 3 excluded: Lan port 4
VLAN 1 untagged membership: LAN port 4
VLAN 1 excluded: LAN ports 1-3
VLAN 666 tagged membership : LAN ports 1-3
VLAN 666 tagged excluded: LAN port 4
Inter VLAN Routing is disabled for all VLANs and Device Management enabled for VLAN 1 and VLAN 3.
Is this correct?
IP Setup
I need to give this device an IP address (192.168.3.254) and configure it to know how to route packets for destinations 192.168.11.x, .12.x, .13.x
I would do: go to Setup -> Network, add IP address 192.168.3.254 (255.255.255.0), click save.
Then go to Setup -> Advanced Routing and add route to 192.168.11.0 (255.255.255.0) with a default gateway of 192.168.3.1, a hop of e.g. 1 and interface LAN.
Do the same for 192.168.12.0 and 192.168.13.0
Also the RV320 needs an IP address of 192.168.66.1 (guest subnet) and serve DHCP in this subnet. So I go to DHCP -> DHCP Setup and add VLAN 666, Device IP Address 192.168.66.1, Subnet Mask 255.255.255.0 and all other parameters for the DHCP scope.
Guess what: I can’t access the Internet from neither internal subnet nor am I able to get the Management Web UI of the RV320 from an internal subnet. I guess I’ve been doing something terrible wrong…
Please help – kind regards
Carsten
