RV325 VLAN configuration help

[selch2169]

Hi everyone,

I'm a novice with Cisco's routers and not a network engineer to boot. I am attempting to switch my small retail store from a consumer level router to this RV325. I don't need anything too complex other than to isolate networks, and one of my devices is causing me fits. 

If you ask me why I'm am trying to do something in a particular way, it's because I thought that was the way to do it. Obviously, what I'm doing isn't working. ;)

Here's what I was trying to do:

VLAN 1: default lan, ports 2-11, all untagged, dhcp enabled, DNS from ISP. Ports 12-14 excluded. inter-vlan routing disabled.

VLAN 2: credit card network, ports 12-14, dhcp enabled, DNS from ISP, ports 1-11 excluded, inter-vlan routing disabled.

VLAN 3: guest wifi network, port 1, dhcp enabled, DNS from ISP, ports 2-14 excluded, inter-vlan routing disabled.

Results:

VLAN 1: devices plugged into vlan 1 ports get an IP address and can reach the internet just fine.

VLAN 2: single device on port 12 will not pickup a DHCP address. (This device is a router. More about his below.)

VLAN 3: the plan here is to take previous wifi router (not Cisco), create it's own guest network that goes nowhere but out to the internet. 

The device on VLAN 2 is from my credit card processor. It talks via it's own wifi to the card readers in the store. All this box needs is an IP address and the ability to get to the internet. It does not need  to talk to anything else in my network. It's a black box with no configuration access. Someone from the company finally told me that some equipment, like a real Cisco router, won't just give this device an IP without some special configuration. I don't know what that bit of configuration is and am looking for help.

While we're at it, if my vlan config could be done better or smarter, I'm open to hearing that too.

Thanks for your help,

Matt

[selch2169]

bump

[dannychampion1]

I'm going to assume VLAN 2 is tagged.

The wireless device.  I installed these before when working with a smaller retail computer store some time ago.  If I remember correctly it was a self registering tiny black access point that paired to a wireless hand held.  Is it a TD terminal?

[selch2169]

VLAN 2 was not tagged. I certainly can do that. 

It is a self registering little box but not the exact type you guessed. My machines have credit card readers on them and they talk wirelessly to this device. Is tagging the VLAN really all there is to get this box an IP? 

[dannychampion1]

Unless you can assign a vlan id to that box then un tagged should just work.  Assuming the box still works with your old configuration.

Perhaps you need a MAC address reservation set or something along those lines.  

[selch2169]

I'm not sure I follow you. I thought that excluding VLAN1 ports 12-14, and untagging 12-14 for VLAN2 would isolate VLAN2 devices. Obviously, that's not the case.

I could untag VLAN1 ports 12-14 and Tag VLAN2 ports 12-14. The VLAN2 ports are just access ports.

I don't understand what about the router is preventing the satellite box on VLAN2 from getting an IP.