Showing results for 
Search instead for 
Did you mean: 

In need of help - SG300-20


I've posted a couple of times but really haven't heard back.

I have an SG300-20 in layer 3 mode.  I have a generic, non vlan-aware gateway.

I'm trying to setup a few vlans.  if possible, i don't want to use VLAN1 because that's adminstrative.

I've created VLAN2 and i want it to be used as the VLAN in which all the other VLANS access the internet by, thus relinquishing the gateways only duties to firewalling. 

if there's any inter-VLAN communication going on, it would be done via VLAN2. 

I just can't to save my life, figure out how to make it work. 

the ips are as follows:







when i want to get to the gui of the sg300, i use

the default vlan is set to vlan1, which i guess it should stay that way?  like i said, it's for administrative purposes only.

all means of getting out to the internet for all pcs (assuming they're allowed out on the web) would be through VLAN2, no one would have access (other than me) to VLAN1.



5 Replies 5

David Hornstein
Rising star
Rising star

Hi Jeff,

Like ar router,  the SG300 in layer 3 mode behaves like a Layer 3 switch, so you have to tell it where to send packets. The switch is not as sophisticated in terms of software features when compared to traditional TAC supported switches, so it doesn't include any routing protocols. But it is priced accordingly, very cost effective.

Static route in SG300

So I do hope that you have added a default route to the SG300

ip= mask= nexthop=

Static route in WAN router

Also you must tell the WAN router where these new networks are.

In the WAN router some static  routes pointing back to the SG300 are needed

ip= mask= nexthop=

ip= mask= nexthop=

ip= mask= nexthop=

or  If the SG300 contains all your 192.168.X.X networks, one summarized static route would do;

ip= mask= nexthop=

try that,  and remember to save your configuration.

regards Dave

Hey Dave!

Thanks so much for getting back to me.  I'll have to try what you suggested when i get home.

What i'm trying to do is, as you put it, to have all off my 192.168.x.x networks contained in the switch itself.

all VLANS communicate through the switch, and only when someone wants to get out onto the web does the gateway come into play.

on the switch, VLAN2 will be the internet VLAN, not VLAN1.  is this possible, or do i have to go in and set VLAN2 as the default VLAN? 

Also, do i change the lan-side ip address of the gateway to 192.168.2.x or leave it as X.X.1.1?

Thanks a lot!


Hey Dave,

I tried as you said but it didn't work, any other suggestions?



Hi jeff,

Fredrick Barnard coined the phrase "a picture is worth a thousand word."

Would you be so kind as to;

1. draw a picture of the hypothetical network

  • a scanned neat paper and pencil diagram is fine
  • microsoft paint, is fine as well as a alternative
  • include all  IP addresses of attached IP hosts and the ports you want them on.

Save a copy of the existing configuration  and attach it in your next posting..

We'll get this nailed down.

regards Dave

here's that diagram i was talking about;

SO, i'm not using my WAN router for anything other than a gateway..  i will create static routes on the switch.

I believe it was you who told me to use as the routing statement, but i must be doing something wrong because i tried that and it still didn't work. 

So i guess we can try taking it from here. 

What should my next step be or do you need any more info?

Thanks for all your help!


Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers