• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Vlans No Switch?

Scheduled Pinned Locked Moved L2/Switching/VLANs
vlans
51 Posts 6 Posters 11.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G
    gjaltemba @telescopedepth
    last edited by Nov 24, 2018, 3:59 PM

    @telescopedepth In a pinch you can just use ea4200 as a 5 port managed switch.

    1 Reply Last reply Reply Quote 0
    • T
      telescopedepth
      last edited by telescopedepth Nov 25, 2018, 1:22 PM Nov 25, 2018, 1:17 PM

      I bought that exact one and I hope it has all I need it had a 30 day DOA money back guarantee... Usually I do try to figure out the best option but I spent so much time on this.. I thought that was one that will work and has 30 day DOA money back I will try its overkill but maybe I will start a neighborhood watch program and get everyone's surveillance feeds and put NASA out of a job and No Not NaSa but you know who they that must not be named ...I wasn't sure which one i needed I thought I needed full managed... Thanks Again

      1 Reply Last reply Reply Quote 0
      • J
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz Nov 25, 2018, 1:27 PM Nov 25, 2018, 1:26 PM

        Let us know how it turns out... 24 ports isn't all that many ;) I have a 28 port sg300 that is getting full.. You would be amazed at how fast you can use up ports when you have them...

        And you can never have too many features in your "switch" Go Big or Go Home as they say -- hehehe

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        T 2 Replies Last reply Nov 25, 2018, 1:30 PM Reply Quote 0
        • T
          telescopedepth @johnpoz
          last edited by Nov 25, 2018, 1:30 PM

          @johnpoz especially when your a nerd I was thinking of seeing if Android supports usb Ethernet your right you never remember the 400 devices laying around not being used until you decide a new use for them

          1 Reply Last reply Reply Quote 0
          • J
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz Nov 25, 2018, 1:34 PM Nov 25, 2018, 1:33 PM

            From a quick look at the specs that should be a great switch at the price point.. Quick glance it only seems to be layer 2 and not 3... So guess you won't be able to use it as downstream router ;)

            While DOA warranty is nice and all - but 23 ports dead out of 24 is not DOA... I would validate all ports work and such asap..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            T 1 Reply Last reply Nov 25, 2018, 1:40 PM Reply Quote 0
            • T
              telescopedepth @johnpoz
              last edited by Nov 25, 2018, 1:40 PM

              This post is deleted!
              B 1 Reply Last reply Nov 25, 2018, 2:16 PM Reply Quote 0
              • B
                Babiz @telescopedepth
                last edited by Nov 25, 2018, 2:16 PM

                @telescopedepth Hi!
                VLANs on pfSense work well with right hardware, my question is why 🐶
                I mean ,the final goal of bulding more virtual lan instead of putting additional ethernet cable and interface on pfSense?

                For my work I do VLANs on hotel with older network layout and a cable "do it all in one" PPPoE , private lan, guests lan, lool ... So I put two identical switchs at both ends for bulding one VLAN TRUNK and only why not available quick other method to manage different networks above.

                This not avoid me to notice "poor performance" with high load traffic, like frame retransmission and packet loss. So is not too much fun when your customers make pressure on you everyday, because network is slow even if it's "more secure".

                Basically my first rule in mind is "K.I.S.S." 💋 (Keep It Simple Stupid)
                for good reasons, I mean I need very good reason for build more "complex" network layouts with VLANs and in most case is better to leave existing network "as is" if you not planning a "serious" rebuld of network at your site.

                VLANs just for fun? No thanks 🍕

                J T 2 Replies Last reply Nov 25, 2018, 4:24 PM Reply Quote 0
                • J
                  JKnott @Babiz
                  last edited by Nov 25, 2018, 4:24 PM

                  @babiz said in Vlans No Switch?:

                  @telescopedepth Hi!
                  VLANs on pfSense work well with right hardware, my question is why 🐶
                  I mean ,the final goal of bulding more virtual lan instead of putting additional ethernet cable and interface on pfSense?

                  For my work I do VLANs on hotel with older network layout and a cable "do it all in one" PPPoE , private lan, guests lan, lool ... So I put two identical switchs at both ends for bulding one VLAN TRUNK and only why not available quick other method to manage different networks above.

                  This not avoid me to notice "poor performance" with high load traffic, like frame retransmission and packet loss. So is not too much fun when your customers make pressure on you everyday, because network is slow even if it's "more secure".

                  Basically my first rule in mind is "K.I.S.S." 💋 (Keep It Simple Stupid)
                  for good reasons, I mean I need very good reason for build more "complex" network layouts with VLANs and in most case is better to leave existing network "as is" if you not planning a "serious" rebuld of network at your site.

                  VLANs just for fun? No thanks 🍕

                  The purpose of VLANs is to provide logical isolation. For example, many networks use VoIP phones and a pass through port for a computer. On one job I did in a seniors residence, a few years back, there was the native LAN for the office and VLANs for VoIP, inmate's resident's internet access and one for network management.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  B 1 Reply Last reply Nov 25, 2018, 4:36 PM Reply Quote 0
                  • B
                    Babiz @JKnott
                    last edited by Nov 25, 2018, 4:36 PM

                    @jknott
                    Yes, you are right, I'm agreed your point of view!
                    Cheers.

                    1 Reply Last reply Reply Quote 0
                    • J
                      johnpoz LAYER 8 Global Moderator
                      last edited by Nov 25, 2018, 5:25 PM

                      There is one thing for logical, and then there is actual isolation and security... I don't want iot devices on the same network as my PC and NAS, etc.. I sure an the hell do not want guest wifi clients on any of my networks, etc. Who knows what nasty billy's device has on it, etc..

                      Sorry but the days of the single lan home network are thing of the past... Atleast from any sort of security concerns - your typical home has more and more devices on the "network" Doesn't mean that have to be on 1 flat network.. I want a firewall between these different types of devices thank you very much ;)

                      KISS while sure that 1st S can stand for simple and it can also stand for SECURE ;)

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      J 2 Replies Last reply Nov 25, 2018, 8:42 PM Reply Quote 1
                      • J
                        JKnott @johnpoz
                        last edited by Nov 25, 2018, 8:42 PM

                        @johnpoz said in Vlans No Switch?:

                        I don't want iot devices on the same network as my PC and NAS, etc.. I sure an the hell do not want guest wifi clients on any of my networks, etc.

                        You often don't have a choice about cabling. You have to use what's there. In that senior's residence I mentioned, we used ADSL over existing phone lines to bring Internet access to the rooms. I did similar in a hotel turned university residence. Phone lines were there, Ethernet cables weren't, so ADSL was used over the phone lines.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 0
                        • J
                          JKnott @johnpoz
                          last edited by Nov 25, 2018, 10:11 PM

                          @johnpoz said in Vlans No Switch?:

                          I sure an the hell do not want guest wifi clients on any of my networks, etc. Who knows what nasty billy's device has on it, etc..

                          Assuming the guest WiFi has it's own SSID and VLAN, how would a guest user have access to the main LAN traffic? Even if they managed to tag their traffic, it would result in QinQ tagging, which wouldn't get them anything.

                          PfSense running on Qotom mini PC
                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                          UniFi AC-Lite access point

                          I haven't lost my mind. It's around here...somewhere...

                          1 Reply Last reply Reply Quote 0
                          • J
                            johnpoz LAYER 8 Global Moderator
                            last edited by johnpoz Nov 25, 2018, 10:36 PM Nov 25, 2018, 10:35 PM

                            Have no idea what your talking about dude - yeah the ssid would be on its own vlan - DUH... My points were to the ""do it all in one"" sort of comment..

                            ie " leave existing network "as is"

                            That is not what the OP should be doing but segmenting his network. Which is the point trying to make.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • B
                              Babiz
                              last edited by Babiz Nov 25, 2018, 10:53 PM Nov 25, 2018, 10:52 PM

                              After reading lastest post, I think to write a mini how-to for vlans primitive users like me.
                              So I own a pair of TL-SG105E and will be nice to write about standard vlans configuration with added global tribute from Netgate community! Hmmm... 😎
                              ...lol, I missing the vlans train, 🚋 🚋 heh basically vlan concept is simple but is easy to lost under hardware real worLd! Ho yes.. hardware will be make a difference with various configuration stranger things happens 🌅

                              J 1 Reply Last reply Nov 25, 2018, 11:17 PM Reply Quote 0
                              • J
                                JKnott @Babiz
                                last edited by Nov 25, 2018, 11:17 PM

                                @babiz said in Vlans No Switch?:

                                So I own a pair of TL-SG105E

                                You don't want to use those switches. They don't handle VLANs properly.

                                PfSense running on Qotom mini PC
                                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                UniFi AC-Lite access point

                                I haven't lost my mind. It's around here...somewhere...

                                B 1 Reply Last reply Nov 26, 2018, 12:25 AM Reply Quote 0
                                • B
                                  Babiz @JKnott
                                  last edited by Nov 26, 2018, 12:25 AM

                                  @jknott looool 🐶
                                  Not , really not ideal hardware ;) , you are in truth,
                                  I notice some packets errors under statistic tab, when this bad switch configured only one vlan trunk 🦆
                                  Is nice for me, to figure it out why happen this, because it's working fine with few clients talking, and when many clients talking I get network problem.
                                  For sure this kind of hardware is no good for business, SG105E kidding me! :

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    telescopedepth @Babiz
                                    last edited by telescopedepth Nov 26, 2018, 4:16 AM Nov 26, 2018, 4:03 AM

                                    @babiz cable costs I have allready put alot of $ into cables and it would be hundreds of feet of wireing my entire property ... and I need to isolate my security systems 3 separate systems then I got smart wifi power switches then I got endless number of computer's and devices that I want to secure ..Just saw that multiple openvpn instances would cost performance so that ideas gone

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      telescopedepth @johnpoz
                                      last edited by Nov 26, 2018, 4:28 AM

                                      @johnpoz using a single linksys 6350 or something like that in bridge mode and if i need more ports i put another netgear 6300 in wireless access point mode

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        telescopedepth
                                        last edited by telescopedepth Nov 26, 2018, 4:00 PM Nov 26, 2018, 3:55 PM

                                        well i want to order a switch which one is capable of vlans alot of the ones i see dont say 802.1q Best buy office depot most likely choices for finding them

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          Derelict LAYER 8 Netgate
                                          last edited by Nov 26, 2018, 4:38 PM

                                          You want something that says Managed, Smart, WebSmart, etc. The specifications should definitely list 802.1q.

                                          I will never again buy anything that requires some form of client application to configure. Needs to have a web interface.

                                          I like the D-Link DGS-1100-08 for a cheap switch.

                                          Chattanooga, Tennessee, USA
                                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                          T 1 Reply Last reply Dec 2, 2018, 8:18 AM Reply Quote 0
                                          17 out of 51
                                          • First post
                                            17/51
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received