Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    TP-LINK TL-SG108E VLAN configuration issue

    L2/Switching/VLANs
    3
    100
    17.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Mitch Rapp @mcury
      last edited by Mitch Rapp

      @mcury
      Brother, I am so sorry. I haven't grasped all of the concepts yet, obviously. you have the patient of Job.

      This is what I've just done.

      1. TL-SG108E port 1 to pfsense -PVID1 untagged VLAN1
        ADDED VLAN28 as tagged to port 1.

      2. TL-SG108E port 2 to AX66000 PVID 2 untagged VLAN28.

      3. Created OPT1 (igb2), enabled, Static IP 10.1.1.1 /24

      4. Created VLAN28 (igb2 OPT1 as parent interface) Tagged 28
        under "interface assignments," VLANs" tab.

      5.Created VLAN28 interface, "VLAN 28 on igb2 - opt 1 (VLAN28)"
      enabled, set IP to 10.28.28.2 /24,

      1. Created firewall rule for VLAN28 allowing protocol "any" for VLAN28.

      2. VLAN28 - DHCP enabled, range 10.28.28.10 to 10.28.28.254.
        My TL-SG108E is set to 10.28.28.2 * AX6600 is set to 10.28.28.3.

      3. TL-AX6600 is on the LAN port to TL-SG108E (port 2)

      Is any of that correct? :-)

      No wifi now. It has a signal but no internet connectivity. Should I reset the AX6600 to "bridge mode" or use the VLAN feature on it?

      M 1 Reply Last reply Reply Quote 0
      • M
        Mitch Rapp @mcury
        last edited by

        @mcury
        229cbefe-74b8-4d0d-9d35-ba16a08905c1-image.png

        1 Reply Last reply Reply Quote 0
        • M
          mcury @Mitch Rapp
          last edited by

          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

          TL-SG108E port 1 to pfsense -PVID1 untagged VLAN1
          ADDED VLAN28 as tagged to port 1.

          Ok, perfect.

          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

          TL-SG108E port 2 to AX66000 PVID 2 untagged VLAN28.

          You mean PVID 28, right?
          Should be PVID28 and untagged VLAN28

          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

          Created OPT1 (igb2), enabled, Static IP 10.1.1.1 /24

          Ok, perfect.

          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

          Created VLAN28 (igb2 OPT1 as parent interface) Tagged 28
          under "interface assignments," VLANs" tab.

          Ok, perfect.

          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

          .Created VLAN28 interface, "VLAN 28 on igb2 - opt 1 (VLAN28)"
          enabled, set IP to 10.28.28.2 /24,

          Ok, perfect

          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

          Created firewall rule for VLAN28 allowing protocol "any" for VLAN28.

          Ok, can you show that firewall rule? It should be Protocol any, Source: VLAN28 net, to destination any

          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

          VLAN28 - DHCP enabled, range 10.28.28.10 to 10.28.28.254.
          My TL-SG108E is set to 10.28.28.2 * AX6600 is set to 10.28.28.3

          VLAN28 - DHCP enabled range 10.28.28.10 to 10.28.28.254 - Ok, perfect
          TL-SG108E should have an IP address of 10..1.1.2.
          TL-AX6600 should have an IP address of 10.28.28.X where X is from 2 to 9, you can choose.

          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

          TL-AX6600 is on the LAN port to TL-SG108E (port 2)

          Ok, perfect.

          @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

          No wifi now. It has a signal but no internet connectivity. Should I reset the AX6600 to "bridge mode" or use the VLAN feature on it?

          Can you connect a phone to that wifi network and confirm if its getting an IP from the 10.28.28.0/24 network?

          M 1 Reply Last reply Reply Quote 0
          • M
            Mitch Rapp @mcury
            last edited by

            @mcury said in TP-LINK TL-SG108E VLAN configuration issue:

            Ok, can you show that firewall rule? It should be Protocol any, Source: VLAN28 net, to destination any

            Ok, check this firewall rule for VLAN28 before I proceed.
            action = Pass
            Address family = Ipv4
            Interface = VLAN28
            Protocol = Any
            Source = VLAN28.net
            Destination = any

            M 1 Reply Last reply Reply Quote 0
            • M
              mcury @Mitch Rapp
              last edited by mcury

              @mitch-rapp It seems correct, did you have to write VLAN28.net or did you select it from the drop down menu when creating the firewall rule?
              You can post a screenshot of that rule

              M 2 Replies Last reply Reply Quote 0
              • M
                Mitch Rapp @mcury
                last edited by

                @mcury I selected it from the drop-down menu

                M 1 Reply Last reply Reply Quote 0
                • M
                  mcury @Mitch Rapp
                  last edited by

                  @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

                  @mcury I selected it from the drop-down menu

                  So, its correct..
                  Can you connect a device to that wifi network, and confirm if its getting an IP address from the DHCP ? It should get an IP from pfsense DHCP, check that then we proceed.

                  1 Reply Last reply Reply Quote 0
                  • M
                    Mitch Rapp @mcury
                    last edited by

                    @mcury
                    Ok, I can ping the switch at 10.1.1.2
                    Can't ping the Deco at 10.28.28.3

                    M 1 Reply Last reply Reply Quote 0
                    • M
                      mcury @Mitch Rapp
                      last edited by mcury

                      Those pings you mentioned, you are pinging from pfsense, right?

                      Go to pfsense Status > DHCP Leases, and check if the deco 10.28.28.3 shows there, it should have a MAC address, if it shows incomplete its because there is a problem.
                      This Deco, does it have a gateway configured? Check if it shows with the MAC address in pfsense, Diagnostics > ARP table

                      Edit: In addition to what has been said above, make sure TL-AX6600 is configured to AP mode with the DHCP is disabled...

                      1 Reply Last reply Reply Quote 0
                      • M
                        Mitch Rapp
                        last edited by

                        @mcury

                        Ah! I was pinging from CMD on LAN (igb1).
                        Let me check ping from pfsense.
                        And check for DHCP lease.

                        1 Reply Last reply Reply Quote 0
                        • M
                          Mitch Rapp
                          last edited by

                          @mcury
                          On the Deco gateway, yes, I set the gateway to 10.28.28.1
                          IP to 10.28.28.3
                          255.255.255.0
                          DNS servers? I used 1.1.1.1 & 8.8.8.8

                          M 1 Reply Last reply Reply Quote 0
                          • M
                            mcury @Mitch Rapp
                            last edited by

                            @mitch-rapp Thats right..

                            Did you connect a device to the wifi network as suggested above? Internet should be working now...
                            If its not working, please confirm if the device you connected to the wifi network got an IP address from the 10.28 network..

                            M 1 Reply Last reply Reply Quote 0
                            • M
                              Mitch Rapp @mcury
                              last edited by

                              @mcury No Deco!
                              2b7156eb-5cb2-4498-ab9e-c803e8e5b7ea-image.png

                              M 1 Reply Last reply Reply Quote 0
                              • M
                                mcury @Mitch Rapp
                                last edited by

                                @mitch-rapp Deco is connected to TL-SG108E, but in a different port than the port we configured, right?!

                                I asked you to test the WIFI connectivity from TL_AX6600... Did you test that?
                                Please, test it...

                                M 1 Reply Last reply Reply Quote 0
                                • M
                                  Mitch Rapp @mcury
                                  last edited by

                                  @mcury
                                  No internet connection.
                                  Also, the IP address cannot be set in Deco AP mode,
                                  So I’m trying the VLAN setting on Deco.
                                  Vlan ID = 28
                                  VLAN priority. = ?

                                  M 1 Reply Last reply Reply Quote 0
                                  • M
                                    mcury @Mitch Rapp
                                    last edited by

                                    @mitch-rapp

                                    8d76a9c2-63d9-4080-9e8c-ea17c8bb5cce-image.png

                                    The wifi network where Alexa is connected to, is that working?
                                    DHCP, is it disabled in the TL-AX6600?
                                    Is TL-AX6600 configured in AP mode?

                                    M 2 Replies Last reply Reply Quote 0
                                    • M
                                      Mitch Rapp @mcury
                                      last edited by

                                      @mcury
                                      I can set the AX6600 to AP mode, and it will deactivate DHCP server, and static IP.
                                      I can leave it in Router mode and set the IP but can't disable DHCP.

                                      I've tried both ways and neither seem to be working.

                                      M 1 Reply Last reply Reply Quote 0
                                      • M
                                        mcury @Mitch Rapp
                                        last edited by

                                        @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

                                        I can set the AX6600 to AP mode, and it will deactivate DHCP server, and static IP.

                                        Set it to AP mode, then reboot it. Cable coming from TL-SG108E must be connected to a LAN port of the AP (connect it to the LAN1, not WAN/LAN).

                                        After that, try to connect a device to it and test if internet is working in that device.

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          Mitch Rapp @mcury
                                          last edited by

                                          @mcury
                                          Oh! The AX6600 just showed up in the ARP table! IP & MAC address

                                          M 1 Reply Last reply Reply Quote 0
                                          • M
                                            mcury @Mitch Rapp
                                            last edited by

                                            @mitch-rapp said in TP-LINK TL-SG108E VLAN configuration issue:

                                            @mcury
                                            Oh! The AX6600 just showed up in the ARP table! IP & MAC address

                                            Great, now test the wifi connectivity.

                                            M 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post