Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    TP-LINK TL-SG108E VLAN configuration issue

    L2/Switching/VLANs
    3
    100
    17.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mcury @Mitch Rapp
      last edited by mcury

      @mitch-rapp I didn't ask you to create a VLAN1, I asked you to edit interface Igb2 and add an IP address there, this is considered VLAN1, or native VLAN, its pretty hard to explain these things to a person that is starting... :(

      Man, lets start over then.

      Delete that VLAN1.

      Do this:

      TL-SG108E port that connects to pfsense:
      PVID 1
      Untagged VLAN1
      VLAN28 as TAGGED for that port.

      TL-SG108E port that connects to TL-AX6600,
      PVID 28
      Untagged VLAN28

      pfsense: Go to interfaces, Igb2, and put a static IP of: 10.1.1.1 / 24.
      Then, create VLAN28 and add the IP of 10.28.28.1 / 24, tick enable to enable the interface.
      Create a firewall rule allowing all in Firewall > Rules > VLAN28
      Check if DHCP is enabled in that interface, if its not, enable it.

      Check if internet is working in the WIFI.

      Don't forget to put the TL-AX6600 in AP mode, and connect the cable coming from the TL-SG108E in a LAN port, do not use the WAN port.

      M 2 Replies Last reply Reply Quote 0
      • M
        Mitch Rapp @mcury
        last edited by Mitch Rapp

        @mcury
        Brother, I am so sorry. I haven't grasped all of the concepts yet, obviously. you have the patient of Job.

        This is what I've just done.

        1. TL-SG108E port 1 to pfsense -PVID1 untagged VLAN1
          ADDED VLAN28 as tagged to port 1.

        2. TL-SG108E port 2 to AX66000 PVID 2 untagged VLAN28.

        3. Created OPT1 (igb2), enabled, Static IP 10.1.1.1 /24

        4. Created VLAN28 (igb2 OPT1 as parent interface) Tagged 28
          under "interface assignments," VLANs" tab.

        5.Created VLAN28 interface, "VLAN 28 on igb2 - opt 1 (VLAN28)"
        enabled, set IP to 10.28.28.2 /24,

        1. Created firewall rule for VLAN28 allowing protocol "any" for VLAN28.

        2. VLAN28 - DHCP enabled, range 10.28.28.10 to 10.28.28.254.
          My TL-SG108E is set to 10.28.28.2 * AX6600 is set to 10.28.28.3.

        3. TL-AX6600 is on the LAN port to TL-SG108E (port 2)

        Is any of that correct? :-)

        No wifi now. It has a signal but no internet connectivity. Should I reset the AX6600 to "bridge mode" or use the VLAN feature on it?

        M 1 Reply Last reply Reply Quote 0
        • M
          Mitch Rapp @mcury
          last edited by

          @mcury
          229cbefe-74b8-4d0d-9d35-ba16a08905c1-image.png

          1 Reply Last reply Reply Quote 0
          • M
            mcury @Mitch Rapp
            last edited by

            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

            TL-SG108E port 1 to pfsense -PVID1 untagged VLAN1
            ADDED VLAN28 as tagged to port 1.

            Ok, perfect.

            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

            TL-SG108E port 2 to AX66000 PVID 2 untagged VLAN28.

            You mean PVID 28, right?
            Should be PVID28 and untagged VLAN28

            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

            Created OPT1 (igb2), enabled, Static IP 10.1.1.1 /24

            Ok, perfect.

            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

            Created VLAN28 (igb2 OPT1 as parent interface) Tagged 28
            under "interface assignments," VLANs" tab.

            Ok, perfect.

            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

            .Created VLAN28 interface, "VLAN 28 on igb2 - opt 1 (VLAN28)"
            enabled, set IP to 10.28.28.2 /24,

            Ok, perfect

            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

            Created firewall rule for VLAN28 allowing protocol "any" for VLAN28.

            Ok, can you show that firewall rule? It should be Protocol any, Source: VLAN28 net, to destination any

            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

            VLAN28 - DHCP enabled, range 10.28.28.10 to 10.28.28.254.
            My TL-SG108E is set to 10.28.28.2 * AX6600 is set to 10.28.28.3

            VLAN28 - DHCP enabled range 10.28.28.10 to 10.28.28.254 - Ok, perfect
            TL-SG108E should have an IP address of 10..1.1.2.
            TL-AX6600 should have an IP address of 10.28.28.X where X is from 2 to 9, you can choose.

            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

            TL-AX6600 is on the LAN port to TL-SG108E (port 2)

            Ok, perfect.

            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

            No wifi now. It has a signal but no internet connectivity. Should I reset the AX6600 to "bridge mode" or use the VLAN feature on it?

            Can you connect a phone to that wifi network and confirm if its getting an IP from the 10.28.28.0/24 network?

            M 1 Reply Last reply Reply Quote 0
            • M
              Mitch Rapp @mcury
              last edited by

              @mcury said in TP-LINK TL-SG108E VLAN configuration issue:

              Ok, can you show that firewall rule? It should be Protocol any, Source: VLAN28 net, to destination any

              Ok, check this firewall rule for VLAN28 before I proceed.
              action = Pass
              Address family = Ipv4
              Interface = VLAN28
              Protocol = Any
              Source = VLAN28.net
              Destination = any

              M 1 Reply Last reply Reply Quote 0
              • M
                mcury @Mitch Rapp
                last edited by mcury

                @mitch-rapp It seems correct, did you have to write VLAN28.net or did you select it from the drop down menu when creating the firewall rule?
                You can post a screenshot of that rule

                M 2 Replies Last reply Reply Quote 0
                • M
                  Mitch Rapp @mcury
                  last edited by

                  @mcury I selected it from the drop-down menu

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    mcury @Mitch Rapp
                    last edited by

                    @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

                    @mcury I selected it from the drop-down menu

                    So, its correct..
                    Can you connect a device to that wifi network, and confirm if its getting an IP address from the DHCP ? It should get an IP from pfsense DHCP, check that then we proceed.

                    1 Reply Last reply Reply Quote 0
                    • M
                      Mitch Rapp @mcury
                      last edited by

                      @mcury
                      Ok, I can ping the switch at 10.1.1.2
                      Can't ping the Deco at 10.28.28.3

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        mcury @Mitch Rapp
                        last edited by mcury

                        Those pings you mentioned, you are pinging from pfsense, right?

                        Go to pfsense Status > DHCP Leases, and check if the deco 10.28.28.3 shows there, it should have a MAC address, if it shows incomplete its because there is a problem.
                        This Deco, does it have a gateway configured? Check if it shows with the MAC address in pfsense, Diagnostics > ARP table

                        Edit: In addition to what has been said above, make sure TL-AX6600 is configured to AP mode with the DHCP is disabled...

                        1 Reply Last reply Reply Quote 0
                        • M
                          Mitch Rapp
                          last edited by

                          @mcury

                          Ah! I was pinging from CMD on LAN (igb1).
                          Let me check ping from pfsense.
                          And check for DHCP lease.

                          1 Reply Last reply Reply Quote 0
                          • M
                            Mitch Rapp
                            last edited by

                            @mcury
                            On the Deco gateway, yes, I set the gateway to 10.28.28.1
                            IP to 10.28.28.3
                            255.255.255.0
                            DNS servers? I used 1.1.1.1 & 8.8.8.8

                            M 1 Reply Last reply Reply Quote 0
                            • M
                              mcury @Mitch Rapp
                              last edited by

                              @mitch-rapp Thats right..

                              Did you connect a device to the wifi network as suggested above? Internet should be working now...
                              If its not working, please confirm if the device you connected to the wifi network got an IP address from the 10.28 network..

                              M 1 Reply Last reply Reply Quote 0
                              • M
                                Mitch Rapp @mcury
                                last edited by

                                @mcury No Deco!
                                2b7156eb-5cb2-4498-ab9e-c803e8e5b7ea-image.png

                                M 1 Reply Last reply Reply Quote 0
                                • M
                                  mcury @Mitch Rapp
                                  last edited by

                                  @mitch-rapp Deco is connected to TL-SG108E, but in a different port than the port we configured, right?!

                                  I asked you to test the WIFI connectivity from TL_AX6600... Did you test that?
                                  Please, test it...

                                  M 1 Reply Last reply Reply Quote 0
                                  • M
                                    Mitch Rapp @mcury
                                    last edited by

                                    @mcury
                                    No internet connection.
                                    Also, the IP address cannot be set in Deco AP mode,
                                    So I’m trying the VLAN setting on Deco.
                                    Vlan ID = 28
                                    VLAN priority. = ?

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      mcury @Mitch Rapp
                                      last edited by

                                      @mitch-rapp

                                      8d76a9c2-63d9-4080-9e8c-ea17c8bb5cce-image.png

                                      The wifi network where Alexa is connected to, is that working?
                                      DHCP, is it disabled in the TL-AX6600?
                                      Is TL-AX6600 configured in AP mode?

                                      M 2 Replies Last reply Reply Quote 0
                                      • M
                                        Mitch Rapp @mcury
                                        last edited by

                                        @mcury
                                        I can set the AX6600 to AP mode, and it will deactivate DHCP server, and static IP.
                                        I can leave it in Router mode and set the IP but can't disable DHCP.

                                        I've tried both ways and neither seem to be working.

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          mcury @Mitch Rapp
                                          last edited by

                                          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

                                          I can set the AX6600 to AP mode, and it will deactivate DHCP server, and static IP.

                                          Set it to AP mode, then reboot it. Cable coming from TL-SG108E must be connected to a LAN port of the AP (connect it to the LAN1, not WAN/LAN).

                                          After that, try to connect a device to it and test if internet is working in that device.

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            Mitch Rapp @mcury
                                            last edited by

                                            @mcury
                                            Oh! The AX6600 just showed up in the ARP table! IP & MAC address

                                            M 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post