Second opinion on VLAN config TL-SG1016DE
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi
I'm a beginner to this so I would very much like a second opinion on this configuration.
This is what I intend.
Port 1. WAN port connected to ISP. VLAN 10
Port 3. Firewall, with one ethernet only. Filtering all traffic. Acting DHCP for all VLANs with different subnets
Port 5,7: Trunk ports to other switches
Port 9-16: IoT VLAN. VLAN 30. Can reach WAN after being filtered by FW on port 3
Port 2,4,6,8: Home net. VLAN 20. Can reach WAN after being filtered by FV on port 3
VLAN 20 should be able to talk to VLAN 30 depending on FW rules
This is my current configuration, will it work?
Any help appreciated.
I dont seem to be able to either telnet och ssh to the switch, but will have to make due with the web or config util.
New try since last time.
from fiber box comes untagged traffic on port 1. it gets VLAN id 10 due to port 1 having PVID 10
the only members of PVID10 is port 1 and 3. So port 3 gets tagged vlan10. The FW then, depending on the rules, tags the traffic with 20 or 30.
ports with PVID20 gets that traffic and sends it to the clients
ports with PVID30 gets that traffic and sends it to the clients
Clients on port 2-8 that send outgoing will send untagged traffic that will be added VLAN id 20. if its directed to the internet the FW in port 3 will get that traffic and change id to VLAN10 and send it to port 1.
Clients on port 3,5,7,9-16 the same but VLAN 30.
port 5,7 speak to other switch that also have VLAN 1 as tagged and VLAN 20,30 as untagged.
how am I doing?
