Share Internet

[rydrik]

I am trying to share Internet with my flat but I don't want the people in the flat to have access to my internal network. I was told the SG200-08 could do this - how do I set it up? My idea was to have Management with VLAN ID 1 on ports 1-2, Internet on port#3 with VLAN ID 100, my part of the house on ports 4-7 with VLAN ID 200 and the flat on port 8 with VLAN ID 300. To assign Internet to ports 4-8, I gave port 3-7 VLAN 100+200 and port 8 VLAN 100+300. All ports 4-8 then got Internet connection but they can also ping each other, which I did not want to. So apparently this is wrong - any ideas how to easy set this up?

[mipopov]

Hello,

The SG200-08 is only L2 device, so it will depend on your router also - what is the brand/model?

Cheers, 

Mike

[rydrik]

Hi, I have four ASUS routers in AiMesh setup where an rt-ac68u is master,
then two rt-ac67u and one rt-ac66u b1 as AiMesh nodes.
/Birger

[mipopov]

Hello,

I didn't see any VLAN support for RT-AC68U out of the box:

https://www.asus.com/Networking/RTAC68U/specifications/

Anyway, you need to have capability to create several networks in your router and assign to particular port the corresponding VLAN. Then devices connected to this port will get the corresponding IP.

For example you can set LAN1 to be member of VLAN 1 (DHCP pool - network 192.168.1.0 mask 255.255.255.128) and the device will get lets say first address after router - 192.168.1.2 with mask 255.255.255.128, default gateway 192.168.1.1 and broadcast 192.168.1.127.

But LAN2 is member of of VLAN 2 (DHCP pool - network 192.168.1.128 mask 255.255.255.128) and the device will get lets say first address after router - 192.168.1.130 with mask 255.255.255.128, default gateway 192.168.1.129 and broadcast 192.168.1.255.

Both networks will have Internet access, but will be separated from each other.

That is what you need to accomplish. 

Check/research  if RT-AC68U can be set like this. 

Hope it helps

Cheers, 

Mike

[rydrik]

Hello Mike,

I am not at home at the moment so I have to check the RT-AC68U later, but I
don't think it has the capability you describe. I bought the SG 200-08 to
do this, as they told me in the shop it could exactly this. What I have
done now is to connect the Internet cable to the SG 200-08 to port 3 (VLAN
100) then my own router to port 4 (VLAN 100&200) and an older router to
port 8 (VLAN 100&300) for the apartment. I have set port 8 to be 100Mbit to
limit the Internet speed of the apartment to 100Mbit and have the rest for
us. So all I use the SG 200 for is to limit the Internet speed to the
apartment, maybe I should talk to the shop and try to get something else
instead, if it cannot do what they said.
/Birger

[rydrik]

I returned the switch as it did not do what I wanted it to and I will use my ASUS routers then connect another separate router from these to the apartment.