Need Advice on VLAN Configuration

Need Advice on VLAN Configuration

Need Advice on VLAN Configuration
Need Advice on VLAN Configuration
a week ago - last edited a week ago

I posted this in the business community forum and didn't receive any replies.  Perhaps someone here in the Home Network community can help.

 

-Original Post-

I have a VLAN configuration problem and would like some advice.

 

Background:

My router (not a TP-Link model) is configured with four subnets (primary network, IoT network, camera network, and media network).  All the LAN ports on the router are configured as trunk ports with the primary network untagged and the other networks having VLAN IDs of 30, 40, and 50 respectively.  One of the LAN ports is wired to a TL-SG116E Easy Smart switch which feeds all the devices in my home office area.

 

The TL-SG116E is configured for 802.1Q VLAN tagging and the trunk port from the router is connected to Port 1.  Port 1 is untagged for the default VLAN and tagged for the remaining VLANs.  The remaining ports are configured as follows:

Ports 2 through 6 are untagged members of the default VLAN (PVID=1).

Ports 7 and 8 are untagged members of the IoT VLAN (PVID=30).

Ports 9 through 12 are untagged members of the camera VLAN (PVID=40).

Ports 13 through 16 are untagged members of the media VLAN (PVID=50).

With the above configuration in mind, I have a Synology NAS that features two LAN ports.  The primary port is connected to the primary network (Port 3 on the switch).  The idea here is to configure the second LAN port of the NAS with an IP address on the camera network so that my NVR (which also resides on the camera network) can back up files to the NAS without having to route everything back through the router.  It should then be a simple matter of connecting the second LAN port to Port 10 of the switch.

 

Problem:

The problem I ran into in the past with the above configuration was that network loops were randomly occurring, causing everything to freeze.  For a lack of time, I never determined whether it was the switch or the NAS that was causing the loops.  Yesterday, I tested the configuration and over a period of several hours, everything was working fine and there were no issues.  I have found information on the internet which says two devices should not have two Layer 2 paths between them.  I don’t know if this applies in this case where VLANs are used.  I also don’t exactly know how the TP-Link Easy Smart switches handle Layer 2 VLAN traffic (i.e. separate MAC tables for each VLAN, etc.).  Can someone shed some light on this and perhaps give me some advice on the proposed configuration?

 

  0      
  0      
#1
Options
1 Accepted Solution
Re:Need Advice on VLAN Configuration-Solution
a week ago - last edited a week ago

  @terziyski 

 

Thanks for responding.  I have extensively reviewed the switch info published by Tp-Link but unfortunately there is nothing on connecting devices with multiple LAN ports to different VLANs.  Until now, I made use of the LAN 2 port on the NAS by bonding it with the LAN 1 port and creating a link aggregation group (LAG).  The smart switch works well with this configuration.

I have now connected the NAS LAN 2 port to the switch on one of the camera VLAN access ports.  My main computer is also connected to the switch but on one of the primary network ports.  In answering your question about routing everything back through the router, doing a TRACERT from the computer to the NAS LAN 1 port on the primary network shows only one hop.  Doing another TRACERT from the computer to the LAN 2 port shows two hops, with the first hop being the router.  That indicates that everything is working correctly.

Commenting on my previously unsolved problems with loops, there have been some changes since then.  The switch is new.  I eliminated the older TL-SG108E and replaced it with a TL-SG116E.  The new switch even has firmware that is newer than what is shown on the Tp-Link download sites.  The NAS has also undergone an OS upgrade.  If there were any anomalies with either device, they appear to be gone now and the current configuration is stable.

 

 

Recommended Solution
  1  
  1  
#3
Options
7 Reply
Re:Need Advice on VLAN Configuration
a week ago - last edited a week ago

  @jra11500 

 

Actually it's the business community that may help you more likely with this case.

Other that that - here's an exampe of configuring 802.1Q VLANs in EasySmart switches.

Another source of information could be the switch configuration guide - Part 5, Chapter 4 (page 50).

I haven't tested similar NAS setup, but have you tried to route everything back through the router and check if it works as expected.

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
  0  
  0  
#2
Options
Re:Need Advice on VLAN Configuration-Solution
a week ago - last edited a week ago

  @terziyski 

 

Thanks for responding.  I have extensively reviewed the switch info published by Tp-Link but unfortunately there is nothing on connecting devices with multiple LAN ports to different VLANs.  Until now, I made use of the LAN 2 port on the NAS by bonding it with the LAN 1 port and creating a link aggregation group (LAG).  The smart switch works well with this configuration.

I have now connected the NAS LAN 2 port to the switch on one of the camera VLAN access ports.  My main computer is also connected to the switch but on one of the primary network ports.  In answering your question about routing everything back through the router, doing a TRACERT from the computer to the NAS LAN 1 port on the primary network shows only one hop.  Doing another TRACERT from the computer to the LAN 2 port shows two hops, with the first hop being the router.  That indicates that everything is working correctly.

Commenting on my previously unsolved problems with loops, there have been some changes since then.  The switch is new.  I eliminated the older TL-SG108E and replaced it with a TL-SG116E.  The new switch even has firmware that is newer than what is shown on the Tp-Link download sites.  The NAS has also undergone an OS upgrade.  If there were any anomalies with either device, they appear to be gone now and the current configuration is stable.

 

 

Recommended Solution
  1  
  1  
#3
Options
Re:Need Advice on VLAN Configuration
a week ago - last edited a week ago

  @jra11500 

 

It seems that the latest FW release is not uploaded on the global support portal.

And I agree that there should be more comprehensive documentation about the easysmart switches.

The good thing is that you seemed to have resolved your original issue.

If this was helpful click on the arrow pointing upward to make it blue. If this solves your issue, click the star to make it blue and mark the post as a "Recommended Solution".
  0  
  0  
#4
Options
Re:Need Advice on VLAN Configuration
a week ago - last edited a week ago

Hi @jra11500,

Thank you for reporting your issue to our community. 

It seems that you have resolved your issue. But your device TL-SG116 belongs to our Business lines, which is an Unmanaged switch.

I will help you transfer your case to the Business Community. If you have further questions, you can reply again.

  0  
  0  
#5
Options
Re:Need Advice on VLAN Configuration
a week ago

  @Joseph-TP 

 

Thank-you for your response.  There is no need to transfer the thread to the business community.  I posted there before posting in the Home community.  Unfortunately, the response from the Tp-Link moderator was inadequate and did not answer my questions and there were no other responses from other forum members.

 

Just a quick comment.  It is odd that the TL-SG116E switch belongs in the business community when the TL-SG105E and TL-SG108E are in the Home community.  The only difference is in the number of ports.

 

  0  
  0  
#6
Options
Re:Need Advice on VLAN Configuration
a week ago

  @jra11500 

 

I think the root issue here is if the different ports on your NAS have a different MAC address for each one ?

 

Some NAS do not do this, and with the same MAC going to two ports on the switch it might cause loops.

 

I dont see anything inherently wrong with your vlan setup on the switch - other than to double check that if a port is mean for one vlan only, untagged, that ALL other vlans on that port should be removed, even the default vlan.

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x1, ES205G x2, EAP650 x6 Remotes: ER605 v2 x3, SG2008P x2, EAP650 x2 VPN Server: ER7206 v2 Controller: OC300
  0  
  0  
#7
Options
Re:Need Advice on VLAN Configuration
a week ago

  @GRL 

 

Thanks for responding.

 

The two ports on my Synology NAS (DS224+) have different MAC addresses.  That was one of the first things I checked.  I have each port on a different VLAN and everything has been working OK for more than a week.  When doing a TRACERT on my main computer, connected to the primary (default) VLAN on the same switch, to the second LAN port on the NAS, the results show two hops with the first hop being the router.  Doing a TRACERT to the first LAN port on the NAS shows only one hop (the NAS).  This tells me that everything is working as expected.

 

 

  0  
  0  
#8
Options