Business Community > Routers > VLAN for work computer
< Routers

VLAN for work computer

VLAN for work computer

VLAN for work computer
VLAN for work computer
2024-08-30 17:27:33 - last edited 2024-09-02 01:23:21
Tags: #VLAN & Multi-Networks
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version:

I have an ER605, and a SG2008P v3.20 connected with a OC200.

 

I have a home office and would like to isolate my work computer on its own VLAN so it only has access to the internet on LAN. I use a docking station and alternate between my own computer and my work computer. 

 

My setup is this ->

 

ER605 -> SG2008P Switch -> Unmanaged Netgear Switch ->docking station

Where I am struggling is how do I isolate my work computer on its own LAN. It appears that both computer are also getting the same ip when connected to the docking station.

 

I can see how to isolate everything on the port on the SG20058P. Do I need to get a managed switch and swap my unmanaged switch? How can I configure this? I am new to VLANs.

 

 

  0      
 
  0      
 
#1
Options
7 Reply
Re:VLAN for work computer
2024-09-02 02:02:28

Hi @jlkweb12 

Thanks for posting in our business forum.

Use the filter and you should find out some guides on this.

Knowledge Base label on the switch page contains the 802.1Q VLAN explanation and basis.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#2
Options
Re:VLAN for work computer
2024-09-03 03:18:52

  @Clive_A unforunately this is only about how to set the port to a profile which I am aware of. Where the issue is that I cant set it at the port level since I am using a docking station. It would block for all computers using that docking station which I dont want to do. Any ideas?

  0  
  0  
#3
Options
Re:VLAN for work computer
2024-09-03 03:25:56

Hi @jlkweb12 

Thanks for posting in our business forum.

jlkweb12 wrote

  @Clive_A unforunately this is only about how to set the port to a profile which I am aware of. Where the issue is that I cant set it at the port level since I am using a docking station. It would block for all computers using that docking station which I dont want to do. Any ideas?

Did you try to read the 802.1Q VLAN explanation instead of just the Configuration Guide?

And do you know if you are setting up 802.1Q VLAN or VLAN interface after you read the CG? I mean you did not specify what you configured and it is just a generic question. I think these guides answer it better.

Try to understand the concept of the concept of VLAN you can configure now. There are differences.

 

I don't have any ideas but guessing and it'd be normal for me to see 802.1Q VLAN is blocking. Quite normal to see what you described so far. And no way to workaround it.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#4
Options
Re:VLAN for work computer
2024-09-03 06:28:47

  @jlkweb12 

It appears that both computer are also getting the same ip when connected to the docking station.

 

That sounds like both computers are using the MAC address of the NIC in the docking station. Do your computers have a 'MAC address pass through' option in the BIOS ?

Enabling this means that the on board NIC MAC address will be used even when in the docking station. This will mean that the computers will then be allocated different IP addresses.

You MAY then be able to use ACLs to limit access to the work computer

  0  
  0  
#5
Options
Re:VLAN for work computer
2024-09-03 16:09:21

  @Clive_A  I am using a VLAN interface. 

 

Issue is that the docking station (confirmed from Anker) has a mac address and an IP and that is all the network sees right now. My issue is how to identify my work computer vs personal using the same docking station. I have tried to override the docking station as a pass through on the MAC address but that hasnt seemed to work. 

 

Struggling to see how to identify the computer to even do anything with it. 

  0  
  0  
#6
Options
Re:VLAN for work computer
2024-09-04 01:07:37

Hi @jlkweb12 

Thanks for posting in our business forum.

jlkweb12 wrote

  @Clive_A  I am using a VLAN interface. 

 

Issue is that the docking station (confirmed from Anker) has a mac address and an IP and that is all the network sees right now. My issue is how to identify my work computer vs personal using the same docking station. I have tried to override the docking station as a pass through on the MAC address but that hasnt seemed to work. 

 

Struggling to see how to identify the computer to even do anything with it. 

I don't know what a Docking station is. But it gets an IP address and you are saying that devices can connect to it. Gives a feeling that it is something similar to the switch?

Anyway, in the guide, if you are using the VLAN interface and you expect to achieve a separation in the network, you use ACL. Guides are available in the CG or the official website, FAQ.

 

To identify your devices, if you are in controller mode, you can reserver an IP address and tag it. Standalone mode, IP-MAC binding.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#7
Options
Re:VLAN for work computer
2024-09-04 05:54:58

  @jlkweb12 

 

Unless you can get the two different computers to use different MAC addresses when in the docking statiom then they will both always be assigned the same IP address by the router via DHCP .

 

Have you thought about configuring one of the computers with a static IP ? I suspect you can't change the work one as its probably locked down, but you ought to be able to set a static IP on your home one

 

Once they're using different IP addresses then you have a chance to control access

  0  
  0  
#8
Options

Information

Helpful: 0

Views: 464

Replies: 7

Tags

VLAN & Multi-Networks
Related Articles
 Vlan manual gateway do not work
526 0
Vlan Issue
452 0
VLAN ID
448 0
SSID with VLAN doesn't work
462 0
Specific VLAN Blocking Intra- and Inter-VLAN pings (but otherwise everything seems to function)
380 0
Parental control to vlan
367 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.