TL-SG108E (v2) question about (default) VLAN1

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

TL-SG108E (v2) question about (default) VLAN1

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
TL-SG108E (v2) question about (default) VLAN1
TL-SG108E (v2) question about (default) VLAN1
2016-09-24 16:36:25
Model :

Hardware Version :

Firmware Version :

ISP :

Hello,

I just bought a TL-SG108E (v2).
But i see that i can't remove the default VLAN1 from the ports.
All ports are untagged member of VLAN1
What do i need to do to remove the VLAN1 on the ports?
I don't want to use VLAN1.

thanks
  1      
  1      
#1
Options
25 Reply
Re:TL-SG108E (v2) question about (default) VLAN1
2016-09-28 16:14:08
Haha,dude, vlan1 is the default vlan for management. You cannot remove it.
  0  
  0  
#2
Options
Re:TL-SG108E (v2) question about (default) VLAN1
2016-10-01 00:22:01
I don't ment to remove the default VLAN1, i junst want to "unmember" al my ports of VLAN1.
  0  
  0  
#3
Options
Re:TL-SG108E (v2) question about (default) VLAN1
2016-10-01 00:23:05

Mr.J wrote

Haha,dude, vlan1 is the default vlan for management. You cannot remove it.


I don't ment to remove the default VLAN1, i junst want to "unmember" al my ports of VLAN1.
  0  
  0  
#4
Options
Re:TL-SG108E (v2) question about (default) VLAN1
2016-10-08 01:29:13
If assign of some port value of PVID to different from 1, will force UNTAGED packets to other VLAN
http://lexxai.pp.ua
  0  
  0  
#5
Options
Re:TL-SG108E (v2) question about (default) VLAN1
2016-10-11 18:38:34

lexxai wrote

If assign of some port value of PVID to different from 1, will force UNTAGED packets to other VLAN


So i have to change for al ports the PVID to a VLAN different from 1?
Is this the only way to do this?
It would be a great feature that you can exclude ports out of VLAN1 in the VLAN setttings in de webinterface menu.
  0  
  0  
#6
Options
Re:TL-SG108E (v2) question about (default) VLAN1
2016-11-08 06:08:13
Will add, that IP of switch can be accessed from any VLAN !!!
Need just set static IP of same network that and switch.
Because switch have all ports in VLAN1.

No secure use it switch in WAN connect solution.
Especially if user can change VLAN w/o any AUTH : http://forum.tp-link.com/showthread.php?91420-TL-SG1016DE-security-of-changes-value-without-any-authentication.
use PVID !=1 not help in this case.
http://lexxai.pp.ua
  0  
  0  
#7
Options
Re:TL-SG108E (v2) question about (default) VLAN1
2016-11-10 05:06:17

lexxai wrote

Will add, that IP of switch can be accessed from any VLAN !!!
Need just set static IP of same network that and switch.
Because switch have all ports in VLAN1.

No secure use it switch in WAN connect solution.
Especially if user can change VLAN w/o any AUTH : http://forum.tp-link.com/showthread.php?91420-TL-SG1016DE-security-of-changes-value-without-any-authentication.
use PVID !=1 not help in this case.


Adding PVID!=1 does help... a little. Untagged packages will be put on different LAN and won't reach the switch, but tagged packages are still able to reach the switch interface. The Vlan(Q) tagging wasn't made for security on those switches.
  0  
  0  
#8
Options
Re:TL-SG108E (v2) question about (default) VLAN1
2017-01-16 01:51:04

sanosis wrote

Adding PVID!=1 does help... a little. Untagged packages will be put on different LAN and won't reach the switch, but tagged packages are still able to reach the switch interface. The Vlan(Q) tagging wasn't made for security on those switches.


I'd tried this. I put port 6 on VLAN 200 and defined PVID = 200, but if I put a IP Address in same network of switch management tool, I can reach web tool.
Is there any way to limit access to switch gui only for specific VLAN?
  0  
  0  
#9
Options
Re:TL-SG108E (v2) question about (default) VLAN1
2017-01-17 02:43:54

fabrizziosoares wrote

I'd tried this. I put port 6 on VLAN 200 and defined PVID = 200, but if I put a IP Address in same network of switch management tool, I can reach web tool.
Is there any way to limit access to switch gui only for specific VLAN?

Forgot about it device until new firmware will be. I have same problem, and I use it switch just as unmanaged.
http://lexxai.pp.ua
  0  
  0  
#10
Options
Re:TL-SG108E (v2) question about (default) VLAN1
2017-01-17 09:24:17

lexxai wrote

Forgot about it device until new firmware will be. I have same problem, and I use it switch just as unmanaged.


I don't understand why TP-Link uses a valid VLAN ID 1 for a default VLAN anyway. Shouldn't untagged packets have no VLAN ID at all (i.e. PVID=0 -> no tag)?
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#11
Options