Creating Vlans with an SG300 series switch

[jtharvey1]

My network has:

1 router, which also handles DHCP duties with one current range specified 192.168.1.x/24
1 switch
1 WAP
about 40 nodes

I want to create multiple VLANS on a Cisco SG300 switch.

Vlan10 - Mgmnt
Vlan20 - Children
Vlan30 - AV
Vlan40 - Automation
Vlan50 - VoIP
Vlan60 - Guest

What are the steps necessary after creating the Vlans in this scenario to make things work?

At this time, the rest of the switch Vlan configuration is default.

WAP is on port 1 of the switch
ROUTER is on port 2 of the switch

The goal of Vlan is to have a bit more security and segment traffic to minimize crosstalk (broadcasts?)

I am using a browser to access and manage the Cisco SG300-28PP switch

Do I need the switch in L2 or L3 mode to accomplish my objective?

I was planning on establishing the following network ranges to match Vlan IDs.

Vlan10 - Mgmnt - 192.168.10.x/24
Vlan20 - Children - 192.168.20.x/24
Vlan30 - AV - 192.168.30.x/24
Vlan40 - Automation - 192.168.40.x/24
Vlan50 - VoIP - 192.168.50.x/24
Vlan60 - Guest - 192.168.60.x/24

In each network range I will be using x.x.x.200 to x.x.x.230 as the DHCP range

Am I missing anything?

What steps do I take to create this in the switch?

[Aleksandra Dargiel]

Hi,

There are several ways to accomplish such a setup it all depends on the capabilities of the other devices and traffic pattern such as all VLANs needs to have internet access, some of them need to be able to communicate etc.

The question is what is your router/internet gateway and is it able to handle several VLANs?

Regards,

Aleksandra

[jtharvey1]

My router is a Ubiquiti USG - and yes, I believe it is capable of handling multiple VLANs.

[Aleksandra Dargiel]

Hi,

In this case there are two ways to approach the issue:

1. make router default gateway for all subnets and leave switch only to handle layer 2 traffic by configuring trunk between switch and router also maybe switch and AP

2. make the switch to be default gateway for all subnets and add default route to point out router as internet gateway; remember that router would need static routes for all vlans/subnets he is not directly connected to; there would be trunk between AP and switch but link between switch and router can be just one single vlan/subnet

I hope it helps.

Regards,

Aleksandra