Hello Sean, Thanks for writing. My apologies for the belated reply. The RV180 will work well for your purposes. To meet your goals, you will need to complete the following: Define the VLANs on the RV180 and the SG300. Configure a trunk between the RV180 and the SG300. Assign physical ports to the appropriate VLANs. Finally, create your desired port forwardings that map to the appropriate hosts on their respective VLANs. So, first, login to the router. Under Networking>LAN>VLAN Membership, you can create multiple VLANs. Let's say you create VLAN 2 and then 3. You will notice, that reading the VLAN table from top to bottom, each port will be untagged in VLAN 1, and tagged in VLAN 2 and 3. (See this post for a detailed explanation on this: https://supportforums.cisco.com/message/3632423#3632423) Also, under the Multiple VLAN Subnets page, you can observe that the router automatically assigns a subnet for each additional VLAN. Members of VLAN 2 will have IP address is the 192.168.2.0 network. Secondly, it is necessary to configure a trunk between the RV180 and the SG300. On the switch, under VLAN Management>Create VLAN, add VLAN 2 and 3. A trunk carries multiple VLANs to another device. The two ports that connect the RV180 and the SG300 together should be untagged on the default VLAN (1), and tagged on all others. Therefore, the correct setting for both ports is 1UP,2T,3T. This is already configured on the RV180 by default. You can accomplish this on the SG300 by going to the Port to VLAN page under VLAN Memebership, changing the drop down box to VLAN 2, clicking go, and, in the column for the port that connects to the router, making the port tagged. Repeat this for all additional VLANs. Finally, you will need to join individual ports to the desired VLAN. To join a port to a VLAN, it should be untagged in that VLAN. Again, using the Port to VLAN page on the SG300, you can make individual ports untagged in a specific VLAN. Once this is accomplished, here is how everything works: Say you plug a computer into port 5 on the switch. Because port 5 is untagged in VLAN 3 (has the setting of 3UP under the Port VLAN Membership table, found under VLAN Management on the SG300), it will join VLAN 3. Therefore, due to the fact that the router know about VLAN 3, and there is a trunk on, say, port 10 of the switch, to port 4 on the router (both ports 1U,2T,3T), the router will receive the information from the computer, and assign it the correct IP address from the subnet for VLAN 3 (by default, 192.168.3.0) You can configured port forwarding on the RV180 by going to the Firewall page, creating a Custom Service, and then using that Custom Service in an Access List. The Access List defines the port forwarding operation. If you have further questions, do not hesitate to contact us anytime. We would be happy to assist you further. All the best, -David Aguilar Cisco Small Business Support Center 1-866-606-1866 ... View more

Glad to know we found a resolution. For everyone's benifit, here is the link I was talking about: https://www.articledashboard.com/Article/Understanding-Routing-Basics-Static-Routes-Part-2/1249174 Thanks for posting, Jeremy. Feel free to contact us anytime. Regards, -David Aguilar Cisco Small Business Support Center ... View more

Hello Jeremy, Thank you for your interest and patience. You are on the right track here. However, several important changes must be made. Consider the following concepts: The concept of a native VLAN. The link between the router and the switch must be part of VLAN 1. Otherwise, information from the router will not be distributed correctly on the switch due to the current PVID of 3. The VLAN IP Interface (VLAN IP Address) identifies the subnet for the VLAN. Therefore, thinking of the switch as a router, you are correct that the default gateway for each client should be the respective VLAN interface on the switch. The switch will automatically route between directly connected IP Interfaces and their subnets. However, in order for your clients to get to network that the switch doesn't know about, (the internet), there must be a default route to the router. Additionally, in order for the router to forward information from the internet back to the VLANs on the switch, the router must know how to reach the different VLANs. The folloing linked figure (Fig. 1) describes an appropriate sample setup. See here. In this scenario, a SG300-10 is configured with 3 VLANs: VLAN 1 - Default VLAN, used for management - 192.168.1.x/24 - Ports 9-10 - 1U - Trunk Mode VLAN 2 - Servers - 192.168.2.x/24 - Ports 5-8 - 2U - Trunk Mode VLAN 3 - Workstations - 192.168.3.x/24 - Ports 1-4 - 3U - Trunk Mode VLAN 1 is used to communicate to the router. Therefore, the following default route must be added to the switch's configuration: ip route      0.0.0.0      0.0.0.0      192.168.1.1 The switch will automatically build the routes between the VLANs local to the switch. Visualize Server C going togoogle.com. Its IP address is 192.168.2.2. Its default gateway should be the VLAN 2 IP Interface on the switch (192.168.2.254 in this example). Because the default route is configured, the switch will forward the internet request to the router. The router will then forward the request to your ISP out the WAN where it will eventually reach Google. However, when the request comes back into the router, the router must know to route it to the 192.168.2.x subnet. So, in order for this to work, routes that accomplish the following must be configured on your router: Subnet IP               Mask                    Gateway                                              Interface 192.168.2.1             255.255.255.0        192.168.1.254 (SG-300 IP Interface)         LAN 192.168.3.1             255.255.255.0        192.168.1.254 (SG-300 IP Interface)         LAN As you have already discovered, there are several limitation to using a router that does not support 802.1Q tagging. Chiefly, your clients will not receive either DHCP or DNS automatically from the router. To mitigate this, you can do either of the following: Run a DHCP server with multiple DHCP scopes on a device connected to your switch. You can then use Option 82 on the switch to route DHCP requests and DNS info between VLANs on the switch. Statically configure IP and DNS information. You could enter Open DNS Servers or Google's DNS servers on your clients. Ideally, you would want to use a router that supports 802.1Q tagging. In this figure here (Fig. 2), you can see the VLANconfiguration page for a Cisco RV180W, a very capable and affordable small business router that I highly recommend. Port 1 on the RV180W is configured as a trunk port and carries VLANs 1-3 to the switch. The clients automatically receive IP addresses and DNS information from the correct DHCP pool on the router. Do not hesitate to contact us. We are always happy to help. All the best, -David Aguilar Cisco Small Business Support Center 1-866-606-1866 ... View more

Hello Jeremy, My name is David Aguilar, and I am an engineer with the Cisco Small Business Support Center. Thank you for writing. To summarize several important concepts: By default, the SG300 is in Layer-2 mode. Therefore, the switch will segment ports into different VLANs. However, for the VLANs to communicate with each other, they need to be trunked to a router that will route between the different subnets. In Layer-3 mode, the SG300 is capable of performing routing functions. Therefore, you could achieve inter-VLAN communication and direct specific VLANs to the router. So, you will need to discover and determine the following: Does your router support 802.1Q VLANs? If so, you can configure a trunk port between the SG300 and the router. The trunk will carry the VLANs to the router. Then, given the router supports it, you can configure inter-VLAN routing to allows inter-VLAN and internet communication. If you router does not support inter-VLAN routing, then you will need to put the SG300 into Layer-3 mode. This will allow you to assign IP interfaces to your VLANs, route between the VLANs locally on the switch, and configure a default gateway to route information to the router, and therefore, the Internet. However, you will need to configure the router to route information back to the switch. So, configuration on the router is still necessary. If you experience any issues with the SG300, do not hesitate to call our Support Center. We can be reached 24/7 at 1-866-606-1866. All the best, -David Aguilar Cisco Small Business Support Center ... View more