Setting up VLANs

Sleeps

I understand that you have to design and then then implement. This is so new to me and don't really understand but willing to learn also because I'm not using the system it makes it difficult. Later this afternoon I will get my hands dirty and hopefully make a little more sense.

I'm using a Tenda router with dual SSID and want to set it up so that all wireless equipment have access to the Internet. I have order a minipci card (which is going to take 2 weeks to arrive) for the firebox so will use this to replace the router.

Sleeps

Metu69salemi

start from basic configuration, check that it works. add some features(if it's not working simplify your config), check what was the problem and add the features..

if you're going to use wlan(ssid)/vlan in that tenda, you'll have to check how that support vlans in switch side of it, and does your switch also allow same kind of trunking usually IEEE802.1Q is used, but some manufacturers is using their propietrary versions.

Sleeps

Yes IEEE802.1Q is supported by the switch. I will give it a go once I finish work. thanks

Sleeps

Metu69salemi

Don't forget next thing. Usually devices with webgui supports gui to be working with native(default) vlan, so you'll have to check that you add also native vlan in that box. and from the switch side, dont tag that traffic.

native vlan traffic is always send without vlan tag.

keith_opswat

You don't HAVE to use vlan1… If you only want 2 vlans you can just use vlan10 and vlan20. Just make sure you set all your switchports to access the vlan's you want.

I'm reading Metu's stuff... Are you trying to have two physical lans with one split by VLAN's?? I thought you just wanted one LAN with multiple VLAN's.

Sleeps

That's correct I want one LAN with multiple VLAN's. However I'm having serious problems with the switch (TL SG1209) been reading the PfSense Guide and having problems creating a trunk port. (In the manual it says Each Trunk should contain 2 to 4 ports. Trunk 1 = 1234 Trunk 2 = 5678) Only want to create 1 trunk and its not possible.

Any advice - driving me crazy.

Sleeps

Perry

Might help http://pfsense.site88.net/mysetup/switch/HP1800-8G_vlan_setup.htm

keith_opswat

You only need one trunk per switch.. A trunk just carries information from multiple VLAN's accross it.

I work with Cisco gear.. So I don't know exactly on yours.

But for Cisco…

int e0/0
switchport mode trunk
switchport mode trunk encap dot1q

And that port is now trunking whatever VLAN's you have created on it... You can get a lot more advanced than that. But you basically set the port into trunk mode... give it an encap mode. And you have a basic trunk.

If you only have 1 vlan there's nothing to trunk...
So you need a minimum of 2 for a trunk to have a point.

Metu69salemi

@Keith: I didn't mention that vlan1 should be used, I only mentioned that default vlan might be "must to use"-list. As Procurves allow to change default vlan to someone else..

Sleeps

@Perry:

Might help http://pfsense.site88.net/mysetup/switch/HP1800-8G_vlan_setup.htm

Much appreciated. Looks simple and it was nearly the same sample (different switch) as in the book.

Sleeps

Sleeps

Created VLAN 10 and 20 (No trunk ports). Using port 8 on the switch to connect to the Firebox but not getting an IP address via DHCP. I have looked through the config and can't see anything wrong on the Firebox. Not sure what I'm doing wrong.

Sleeps

Metu69salemi

That port 8 what is connected to pfsense needs to be trunk

trunk means that it allows multiple vlans go in it, those cannot mixup, so thats why you have atleast OSI Layer 3 device to connect two vlans, in this case it's Pfsense.

IN SHORT: switch port 8 trunk and both vlans in it

Sleeps

I understand now will give it a go, thanks

Sleeps

Sleeps

Just tried creating the trunks and the following msg is appearing.

Trunk member must Be in same Vlan and egress must be same each other. Error exists in entry 1.

Trunk 1 = 1234 Trunk 2 = 5678) Vlan 10 = port 2 and 3 Vlan 20 = 4 and 5

Checked the ports.

I'm totally lost now.

Sleeps

Metu69salemi

Is it possible to have only one trunk?

but try this: switchport#1: trunk with vlan 10, vlan 20
switchport#2: access vlan 10
switchport#3: access vlan 20

Just don't setup more, test if it works, maybe your switch needs 2 trunk ports, 1st and 2nd half of interfaces

Sleeps

Natu69salemi

Can only create 2 trunk ports and it's configured through Gui. Can I start from scratch and send you
screenshots. Will pay for your time. Let me know.

Sleeps

Metu69salemi

Send me images, but if you're willing to pay something to someone, plz consider to donate to this project

Sleeps

Thanks for agreeing to do this. I will definitely donate some money to this project.

Sleeps

Metu69salemi

Replied

Sleeps

Metu69salemi - Thanks for helping out with this. I found some information about trunk groups. http://www.brocade.com/support/Product_Manuals/ServerIron_SwitchRouterGuide/Trunking.4.2.html#78207 and it explains how to setup 2 or more trunk groups (Which you can do with the TL-SL2109 switch (Minimum 2 ports per Trunk)). The 2 ports in a trunk group make a single logical link. Therefore, all the ports in a trunk group must be connected to the same device at the other end.

My question is I have a Firebox with WAN, LAN and 4 OPT ports. (existing network connected to WAN, LAN and OPT1) I have created 2 VLANS 10 and 20 on OPT2 on the Firebox. Would it be possible to connect both cables/Trunks to OPT2 and OPT3 and bind OPT3 to OPT2 so that I will be able to use the VLANS

If this isn't possible what is the way forward?

Thanks in advance

Sleeps