Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't reach my switch's management interface from my VLANs

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    18 Posts 5 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @echo4201
      last edited by

      @echo4201 said in Can't reach my switch's management interface from my VLANs:

      The switch is a TP-Link TL-SG108E

      Avoid TP-Link as some of their gear has problems working with VLANs. I have a TP-Link access point that I couldn't set up with a guest SSID, because of that issue.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      E 1 Reply Last reply Reply Quote 0
      • E
        echo4201 @johnpoz
        last edited by echo4201

        @johnpoz

        Yes I do see 10.0.0.2 in the ARP table and the ARP requests does get replied.

        [2.4.4-RELEASE][root@pfSense.localdomain]/root: arp -a | grep 10.0.0.2
        ? (10.0.0.2) at 18:d6:c7:9a:8e:ff on em0 expires in 1151 seconds [ethernet]
        

        Reminder: I can reach 10.0.0.2:80 from my pfSense box (telnet -s 192.168.0.1 10.0.0.2 80) and pings do work.

        TL-SG108E:
        Firmware Version 1.0.2 Build 20160526 Rel.34615
        Hardware Version TL-SG108E 2.0

        1 Reply Last reply Reply Quote 0
        • E
          echo4201 @JKnott
          last edited by

          @JKnott I have no other issue with VLANs with that switch, but yes it's not the best switch. I will avoid TP-Link for the future. It's for a homelab.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz

            Well sorry to tell you but that switch is garbage... You can not remove vlan 1 from ports... So its pretty useless doing vlans

            v3 has firmware fix, but v1, 2 are just F'd

            You can use it for a dumb switch, but if your going to want to actually do vlans your going to need different switch.

            here is thread over on their forums about it
            https://community.tp-link.com/en/business/forum/topic/96245?page=1

            Took them forever to fix!! And they never fixed it for the older hardware

            edit: I take its the same interface to the switch... So what mac do you see for the IP of the switch, and how many different interfaces do you see on.. Do you see it on your .100 as well?

            Do you have a different switch you can use? That switch is just a POS... So you can never actually create an isolated L2.. all your doing amounts to running multiple L3 on the same L2..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • E
              echo4201
              last edited by echo4201

              Crap ok. You convinced me for the switch. I will try getting a new one soon.

              The thing that baffles me, is that I'm at least expecting to see the packet exit em0 on pfSense, which I am not.

              When doing an "arp -a" I only see 18:d6:c7:9a:8e:ff (TP-Link) on em0, not em0.100, which is expected unless I'm wrong?

              Edit: it seems that I can upgrade to the V3 firmware according to TP-Link in that thread you gave me. I will try that.

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by johnpoz

                You can use the v3 hardware firmware on the v2 hardware? Really? I have the v2 same switch on my self... I should try that.. Your saying it says that in that long has thread I linked too? Do you have a direct link - thanks!

                going through that whole thread again, I don't see where you can use v3 firmware on v2 hardware.. I see this

                Support told me to try the V3 firmware but it reports invalid image when I try. I advised them of this and they then said it wasn't compatible. Can the V3 firmware be made to work?

                Makes no sense that you could do that, if it actually is the same firmware why would they not just back ported it so it can install on v2 hardware, etc..

                Like I said that switch is CRAP, and I really wouldn't have anything to do with that company ever - if they can not get something like basic vlan isolation correct.

                Only reason its on my shelf is people here complaining that vlans were not working, so I bought one myself to play with - and yup they were right.. It doesn't do vlans!!

                I have a dlink and netgear that are in the same price point area that do them just fine.. This works fine for example
                https://www.amazon.com/D-Link-EasySmart-Gigabit-Ethernet-DGS-1100-08/dp/B008ABLU2I

                I used it for a short time to test, but currently none of those low end switches actually on my network.. I have cisco sg300-28 and sg300-10 currently... If your wanting to "lab" something in that price point would be much better ;) I got the 28 for like $180 a while back.. Can do L3 routing, etc. etc.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • E
                  echo4201
                  last edited by

                  https://community.tp-link.com/en/business/forum/topic/96245?page=3

                  post 23 and 24. Rain is from TP-Link support according to post 20.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by johnpoz

                    Well going to plug it in right now and give it a little test ;)

                    edit:

                    Well look at that!!

                    lookatthat.jpg

                    Hmmm - now to see if actually fixed the vlan issue.

                    edit2: Well the gui config application does not allow you to remove ports from vlan 1... But the web interface does..

                    v3.jpg

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 1
                    • E
                      echo4201
                      last edited by

                      That’s great news! I will try to upgrade it later today or this week. In the meanwhile, happy new year to everyone!

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        Wonder if I can put V4 firmware on it ;)

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        jahonixJ 1 Reply Last reply Reply Quote 0
                        • jahonixJ
                          jahonix @johnpoz
                          last edited by

                          @johnpoz that's awesome, you did a firmware upgrade on this hardware:
                          TL-SG108E 2.0 and that even replaced your hardware to:
                          TL-SG108E 3.0
                          Tell me the trick and I'll try that with my car! 🤣

                          1 Reply Last reply Reply Quote 1
                          • jahonixJ
                            jahonix
                            last edited by

                            BTW: is the web interface of those switches reachable on all VLANs or do they have a management VLAN?

                            1 Reply Last reply Reply Quote 0
                            • E
                              echo4201
                              last edited by echo4201

                              @jahonix from all VLANs and that’s hardcoded. Can’t limit which VLANs can access it.

                              1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator
                                last edited by johnpoz

                                Yeah that was there reasoning behind not being able to remove vlan 1 ;) Now that you can remove vlan 1 from ports - you should be able to limit from what network you can access the switch gui from.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.