SG200-8 basic vlan setup

[moelgaard75]

Hi everyone

First of all, I´m new to the VLAN business, but have some understanding of general network configuration.

I´ve recently purchased a SG 200-08 switch in order to separate network traffic (my home office from the kids pc)

As seen by "layout.png" I have an ASUS router which is connected to the switch on port 8. Furthermore I have the home office pc on port 7 and the pc for the kids on port 2 (this pc has currently a static IP). Port 7 and 8 are on vlan1 (default) and port 2 is on vlan2 (test) - see "vlans_one_and_two.png"

So my assumption is this: All pc ports (1-7) are configured as "Access" (for non-vlan aware hardware) and the port for my router is "Trunk" (see interface.png) - in order for port8 to be able to be a member of both vlan1 and vlan2 (but is my router able to identify trunk communication or whould it be set to general?).

If I move port2 to vlan2 all connections to the pc connected on that port is lost. Even the switch is unable to ping it.

Maybe I´ve got it all wrong - does my setup require a router connected between port 2 and the pc currently connected to port 2 in order for the setup to work? Or am I missing something in the configuration of the switch?

Any suggestions and/or comments are greatly appreciated.

Regards.

Kaare

[cchamorr · Accepted solution]

Hello, 

First of all, Thank you so much for all the information, it was very helpful.

In regards to your issue, the problem is your router. I looked up the model number you mentioned on the diagram ASUS RT-AC68U, and even though it seems to be a very capable router for most home functions, it is not VLAN capable.

The main component that you are missing is a VLAN capable router, because it will perform the following functions:

1- Provide IP addresses to not only the default (office) VLAN but also to the guess (Kids) Vlan.

2- It will route all the traffic from both VLANS out to the internet.

The issue you are having now is that the switch is isolating the kids PC into a second VLAN but once you do that, they are not even getting IP addresses as the router doesn't know anything about VLAN 2.

I can recommend the RV130W router as a close replacement for your Asus router. This is a small business router that is VLAN capable.

I have to say that your configuration on the switch is spot on.

I hope this information was helpful. 

[moelgaard75]

Hello cchamorr and thank you for yor reply.

The main reason for choosing the RT-AC68U is the new wireless AC-standard. Do you know if Cisco ships any router like RV130W with AC capabilities?

Regards.

Kaare

[cchamorr]

Yes, I understand.

Unfortunately as of now, the small business unit haven't released any routers that support wireless AC, but they are coming.

We do have Wireless Access Points that support AC but that would mean that on top of changing your router you will have to buy another AP.

Now, with your current setup you won't be able to accomplish the VLAN configuration you are looking for.

There could be another option but I don't know if the Asus router will support it.

You can change your SG200 (Layer 2) switch and purchase a SG300 (Layer 3) routing capable switch. It is a little bit more expensive and the configuration is more complicated but you will be able to have the two VLANS (Only for hardwired PC's, no VLANS for wireless). I just don't know if it would be worth it to do all this changes and just have VLANS on the hardwired PC's.

Please let me know what you think about it and I will provide more info if needed.

[cchamorr]

Hello, 

I just wanted to touch base with you and see if you were able to get your issue resolved.

Please let us know

[moelgaard75 · Accepted solution]

Hi again and thank you for your help.

I´ve contacted ASUS yo hear if they plan to release af version of the AC68U firmware supporting VLAN. For the time being I´ll continue without the VLAN.

Regards