SG 300 28 inter vlan routing help

jonknight · ‎09-13-2011

Hi all,

Setup consists of:

adsl router - 192.168.1.1

sg 300 switch - 192.168.1.2

dlink 8600ap WAP - 192.168.1.3

win 2003 server - 192.168.1.20

I would like to config two IP ranges, one for staff, one for guest wireless access. The dlink wap supports multi vlan SSIDs.

Reason I'm doing this is to prevent access on the guest wireless to access the win 2003 server.

Would this work? Will the switch inter vlan route the 192.168.2.1 to 192.168.1.1 ??

How will vlan 2 get DHCP, will dhcp relay need to be set on vlan 2 to 192.168.1.20 ?

Config vlan 1 for staff access on ssid1 and config vlan 2 for guest on ssid2

Setup IPs for vlan1, vlan2.

Config sg 300 to layer 3 mode

ip route 0.0.0.0 0.0.0.0 192.168.1.1

Setup:

vlan1 staff 192.168.1.3

vlan2 guest 192.168.2.3

Tag adsl router and wap on vlan 1,2. Everything else on vlan 1.

Setup DHCP scopes on server

Staff vlan1

192.168.1.1 – 255
Subnet: 255.255.255.0
Primary dns: 192.168.1.20
Gw: 192.168.1.1

Guest vlan2

192.168.2.1 – 255
Subnet: 255.255.255.0
Primary dns: 192.168.2.1
Gw: 192.168.2.1

jasbryan · ‎09-13-2011

Jon,

Yes, you can put the SG300 switch into layer 3 mode and it will do all the routing between vlans. You will need to configure like you said DHCP relay on the switch to point back to your Win 2003 server (DHCP server).Create multiple DHCP pools on SBserver.Create your default route for all other subnet's/vlans you create. You're above post has it all really. The only thing i don't know how to do is set up the Microsoft Server, if you find out please repost.

Thanks,

Jasbryan

jonknight · ‎09-13-2011

Thank you. A couple of questions.

How do I set DHCP relay?

Was my ip route command correct?

Should the vlan2 dns and gateway be 192.168.2.3 as this is the switchs IP, this will then route it back into vlan 1 to access the adsl router? Am I missing any other commands?

Is this a bad idea, the vlan2 guest will be able to access vlan1's network with inter vlan routing correct? The whole idea was to stop access from vlan2 to vlan1 except for internet traffic to router?