VLAN specific IPs from DHCP in TL-SG3428X-M2
I created multiple VLANs on the switch. Then I enabled DHCP server and created pools. What I want that client personal computers get IP address from DHCP server depending on VLAN (ie: PCs connected to ports belonging to VLAN 10 get IPs in range 192.168.10.X, PCs connected to ports belonging to VLAN 20 get IPs in range 192.168.20.X, and so on).
What is procedure to achive this on my switch (without separate DHCP server!) ? I got lost in all the options.
Regards,
Sašo
Note: I changed subject from "VLAN specific DHCP server in TL-SG3428X-M2" to "VLAN specific IPs from DHCP in TL-SG3428X-M2" ... as I understand, there is only one DHCP server on this switch ... i just want to know, how to configure such functionality.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Maybe I wasn't clear ... I want to achieve the functionality/scenario, described here: https://www.tp-link.com/us/support/faq/1630/ ... but using only my TL-SG3428X-M2 switch.
As I understand TL-SG3428X-M2 has "enough" L3 features to allow this.
Or maybe I don't understand this correctly and there must be always present separate device as DHCP server? In that case I can use my OPNSense for this purpose. But the whole point of purchasing TL-SG3428X-M2 was to manage all VLAN stuff inside the switch.
Regards,
Sašo
- Copy Link
- Report Inappropriate Content
If the DHCP server is configured on the switch and running, you probably just need to configure the access ports correctly. Have each access port untagged in a single VLAN and its PVID set to the VLAN's ID.
- Copy Link
- Report Inappropriate Content
Hi @SasoC
Thanks for posting in our business forum.
SasoC wrote
Maybe I wasn't clear ... I want to achieve the functionality/scenario, described here: https://www.tp-link.com/us/support/faq/1630/ ... but using only my TL-SG3428X-M2 switch.
As I understand TL-SG3428X-M2 has "enough" L3 features to allow this.
Or maybe I don't understand this correctly and there must be always present separate device as DHCP server? In that case I can use my OPNSense for this purpose. But the whole point of purchasing TL-SG3428X-M2 was to manage all VLAN stuff inside the switch.
Regards,
Sašo
Not sure if you need Internet access, but simply creating the DHCP servers on the switch does not guarantee the Internet access. DHCP is dynamic assigning the LAN IP.
You may also refer to this guide:
Or How to configure switch as DHCP server on Standalone mode
- Copy Link
- Report Inappropriate Content
KJK wrote
If the DHCP server is configured on the switch and running, you probably just need to configure the access ports correctly. Have each access port untagged in a single VLAN and its PVID set to the VLAN's ID.
@KJK , thank you for the answer, I think I didn't configure correctly VLAN interface or DHCP pool. I will let you know when I will make a progress.
Sašo
- Copy Link
- Report Inappropriate Content
@Clive_A , thank you for the answer and the hint. I do have OPNSense router/firewall in the configuration (instead of ER605) and it provides me Internet. And I want to use switch as a DHCP server instead of OPNSense (like in your example with ER605 and TL-SG3428X). And I want to use ACLs on switch instead of firewall rules on OPNSense for enabling/disabling inter-vlan access (hope I understand this the right way ).
I think I made some mess with configuration of VLAN interfaces and DHCP pools on the switch. I will try to repeat exactly the steps, provided by you and I will let you know of a outcome.
Sašo
- Copy Link
- Report Inappropriate Content
Hi @SasoC,
I am not familiar with your exact model, but I expect this feature to be nearly similar to how it works on my TL-SG2218.
In my TL-SG2218 I've configured the DHCP server for multiple VLANs, which each use different IP subnets.
To achieve this, first I had to enable one Interface per VLAN on the switch (assign a static IP to the switch for each VLAN).
Then, under 'DCHP Server' you can create DHCP Pools for each VLAN.
Don't forget to Enable the DHCP server.
Hope this answers your question.
Regards,
Steely
- Copy Link
- Report Inappropriate Content
@SteelyDunes , thank you for the answer. Yes, defining the interface was my missing part. Now I get IP addresses as expected.
Now I fight the ACL rules for restricting inter VLAN communication, but I will create new thread about this.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 851
Replies: 7
Voters 0
No one has voted for it yet.