Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Proper setup of switches

    Scheduled Pinned Locked Moved General pfSense Questions
    14 Posts 6 Posters 2.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kcallis
      last edited by

      @JKnott:

      (although, I am actually using a Tl-Link SG108E)

      Bad choice.  TP-Link switches don't handle VLANs properly.  There's another thread about problems with the similar SG105E.

      Well, I have Netgear GS108E v2 (which is why I was using the TL-Link because of being able to access via the web interface as opposed to the configuration program for the v2) or a Mikrotik Routerboard RB951Ui (which I really didn't want to mess with because of the learning curve). Would any of these work better?

      1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott
        last edited by

        Probably, but the TP-Links definitely have problems.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          I have the netgear 108ev3 and can tell that it works with vlans - unlike the tp-link pos.. The hopeful news is there is suppose to be some new "beta" firmware from tplink to fix the vlan nonsense they currently have.  You can hope that their new firmware when/if released fixes the problem.

          The v3 has web gui if that is what your after.  Or you could go with the dlink 1100 it has web gui and also handles vlans correctly.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • curtisgriceC
            curtisgrice
            last edited by

            Yeah sorry but between the re0 (realtek) and TP-Link, your gonna have a bad day.  :P

            Assuming you can pop in a PCIe card, you can ebay some new gear for less than 50 USD and have intel NICs and a Cisco gigabit 24 port switch  ;) A bit more to learn but its not that bad. Cisco has amazing documentation.

            Slow code? Sounds like a good reason to buy more hardware!

            1 Reply Last reply Reply Quote 0
            • K
              kcallis
              last edited by

              @curtisgrice:

              Yeah sorry but between the re0 (realtek) and TP-Link, your gonna have a bad day.  :P

              Assuming you can pop in a PCIe card, you can ebay some new gear for less than 50 USD and have intel NICs and a Cisco gigabit 24 port switch  ;) A bit more to learn but its not that bad. Cisco has amazing documentation.

              Well, it is what I have to work with… I could switch to equipment at the home location. But the reality is that I am trying to be a miserly as possibly on power since I am using the my travel trailer that I use when I am working. So the need for the APU, a decent low powered switch and probably the Nanostation.

              1 Reply Last reply Reply Quote 0
              • R
                robi
                last edited by

                @JKnott:

                (although, I am actually using a Tl-Link SG108E)

                Bad choice.  TP-Link switches don't handle VLANs properly.  There's another thread about problems with the similar SG105E.

                @JKnott:

                Probably, but the TP-Links definitely have problems.

                Not all of them. More correctly: some low-end models don't, but their majority do handle VLANs properly.

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  The re drivers and the APU work fine even with dot1q. They are workhorses.

                  Being miserly is fine but that switch is broken. Get a D-Link DGS-1100-08. They're about $30 and they actually work.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • K
                    kcallis
                    last edited by

                    @Derelict:

                    The re drivers and the APU work fine even with dot1q. They are workhorses.

                    Being miserly is fine but that switch is broken. Get a D-Link DGS-1100-08. They're about $30 and they actually work.

                    I will go replace with the DGS-1100. I am somewhat confused, since the result of what I was trying to achieve seems to be working. On the SG108, I have the LAN interface on port 1; I have the OPT interface in port 2, which has VLAN[5, 10, 15, 20] trunked; I have my TL-Link WA901ND AP with multiple SSID using VLAN[5, 10, 15, 20] tagged on port 3 on the switch.

                    When I connect to a particular SSID using DHCP, I am assigned the appropriate IP address from the correct VLAN. I don't normally hard connect to the untagged ports, but if I create a static address in any of the VLANs or the LAN, I have proper connection on the subnet, I am unclear on the purpose of a untagged port as well as the PVID, but everything seems to work as I think is should be doing. So what does it mean that the TP-Link has issues?

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      "So what does it mean that the TP-Link has issues?"

                      Ports can not be removed from vlan 1.. Any broadcast traffic on vlan 1 will be seen on ALL Ports not just vlan 1 ports.. So if you have broadcast traffic on vlan 1, all your other vlan will see this traffic..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • JKnottJ
                        JKnott
                        last edited by

                        @johnpoz:

                        "So what does it mean that the TP-Link has issues?"

                        Ports can not be removed from vlan 1.. Any broadcast traffic on vlan 1 will be seen on ALL Ports not just vlan 1 ports.. So if you have broadcast traffic on vlan 1, all your other vlan will see this traffic..

                        I have the same issue on a TP-Link access point.  As a result, IPv6 router advertisements are appearing on the wrong SSID, causing devices to get an address on the wrong prefix.  While other TP-Link switches may be OK, I think it's better to just stay away from any company that does things that are so incompetent.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.