• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Netgate 2100 - setup question

Scheduled Pinned Locked Moved Official Netgate® Hardware
67 Posts 6 Posters 14.8k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • N
    netboy @SteveITS
    last edited by netboy Oct 29, 2022, 10:34 PM Oct 29, 2022, 10:23 PM

    @steveits Hey steveits, I have created the port 4 as per the url you provided. Now I want this to apply to port 3 as well. Can you kindly let me know how I go about doing this? Do I follow identical process for port 3 as well - I basically want port 3 and 4 on the same subnet 172.16.0.1/24

    N 1 Reply Last reply Oct 29, 2022, 11:52 PM Reply Quote 0
    • N
      netboy @netboy
      last edited by netboy Oct 29, 2022, 11:53 PM Oct 29, 2022, 11:52 PM

      @netboy
      45e7ceaa-16a8-4aed-b2a2-1e94a385e078-image.png

      My guess is based on the screenshot above:

      • edit VLAN group 0 and REMOVE 3

      • edit VLAN group 1 and ADD 3

      Will the above work? The idea is to make 3 & 4 in subnet 172.16.0.1/24

      1 Reply Last reply Reply Quote 0
      • S
        stephenw10 Netgate Administrator
        last edited by stephenw10 Oct 30, 2022, 1:52 PM Oct 30, 2022, 1:49 PM

        Yes, do that and also change the PVID on port 3 to 4084 to match port 4.

        Screenshot from 2022-10-30 13-51-36.png

        Steve

        N 1 Reply Last reply Oct 30, 2022, 2:59 PM Reply Quote 0
        • N
          netboy @stephenw10
          last edited by Oct 30, 2022, 2:59 PM

          @stephenw10
          Thank you.
          This is how it looks now:

          3ed92305-c6b6-47c1-8c7b-db60f2f92551-image.png

          add2a8d0-bf76-4de9-a88d-ace8b1b2efee-image.png

          Does the above sound OK ?

          N 1 Reply Last reply Oct 30, 2022, 3:11 PM Reply Quote 0
          • N
            netboy @netboy
            last edited by Oct 30, 2022, 3:11 PM

            @netboy As soon as I did the above my Web GUI is VERY SLOW (I was trying to apply static address to certain MAC addresses). Has the port / switch configuration messed up something?

            1 Reply Last reply Reply Quote 0
            • S
              stephenw10 Netgate Administrator
              last edited by Oct 30, 2022, 3:12 PM

              Yes, that's correct for the switch config.

              As long as you have the mvneta1.4084 VLAN interface also configured and assigned it should work as expected.

              Steve

              N 1 Reply Last reply Oct 30, 2022, 3:16 PM Reply Quote 0
              • N
                netboy @stephenw10
                last edited by Oct 30, 2022, 3:16 PM

                @stephenw10
                Get the following message:
                Hmmm… can't reach this page
                192.168.0.1
                took too long to respond

                1 Reply Last reply Reply Quote 0
                • N
                  netboy
                  last edited by Oct 30, 2022, 3:18 PM

                  @netboy 372d22f8-ac5e-41a1-a875-b653c4f7ebfd-image.png

                  This is what I have

                  N 1 Reply Last reply Oct 30, 2022, 3:21 PM Reply Quote 0
                  • N
                    netboy @netboy
                    last edited by netboy Oct 30, 2022, 3:54 PM Oct 30, 2022, 3:21 PM

                    @netboy Definitely something is wrong... the web GUI is very slow......Any suggestions?

                    N 1 Reply Last reply Oct 30, 2022, 3:53 PM Reply Quote 0
                    • N
                      netboy @netboy
                      last edited by Oct 30, 2022, 3:53 PM

                      @netboy When I removed the ethernet jack from port 3 the web gui works normal. Is there something I am missing in configuring port 3?

                      R 1 Reply Last reply Oct 30, 2022, 4:49 PM Reply Quote 0
                      • R
                        rcoleman-netgate Netgate @netboy
                        last edited by Oct 30, 2022, 4:49 PM

                        @netboy What was plugged into port 3 exactly? And if it was a switch what was THAT plugged in to?

                        What it sounds like to me, after a quick glance over the thread, is you might have a loop going -- your main network feeding back into the new VLAN... but that's just an educated guess.

                        Ryan
                        Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                        Requesting firmware for your Netgate device? https://go.netgate.com
                        Switching: Mikrotik, Netgear, Extreme
                        Wireless: Aruba, Ubiquiti

                        1 Reply Last reply Reply Quote 0
                        • S
                          stephenw10 Netgate Administrator
                          last edited by Oct 30, 2022, 5:14 PM

                          Yes, if you had the switch connected to ports 3 and 4.
                          The switch in the 2100 does not support STP to prevent that.

                          Steve

                          N 1 Reply Last reply Oct 30, 2022, 6:15 PM Reply Quote 0
                          • N
                            netboy @stephenw10
                            last edited by netboy Oct 30, 2022, 6:16 PM Oct 30, 2022, 6:15 PM

                            @stephenw10 What is STP? Yes port 3 and port 4 are connected to "separate" unmanaged switches so that anything connected to the switch has the 172 subnet.

                            This was my idea right from beginning.

                            Are you telling me that I cannot connect any switch to port 3 and 4?

                            Please note that port 3 is disconnected right now and port 4 is connected to a unmanaged switch. This configuration does not choke up web GUI but once I connect port 3 to a switch the web GUI chokes up.

                            Kindly advice

                            R 1 Reply Last reply Oct 30, 2022, 6:16 PM Reply Quote 0
                            • R
                              rcoleman-netgate Netgate @netboy
                              last edited by Oct 30, 2022, 6:16 PM

                              @netboy said in Netgate 2100 - setup question:

                              What is STP?

                              Spanning Tree Protocol.

                              If you have a link from one network going into another, it cannot detect that and mitigate the cross-talk.

                              You can connect a switch to those ports, yes, but I was asking you what the rest of those are connected to -- is it possible that one of those switches is connected to port 1 or 2?

                              Ryan
                              Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                              Requesting firmware for your Netgate device? https://go.netgate.com
                              Switching: Mikrotik, Netgear, Extreme
                              Wireless: Aruba, Ubiquiti

                              N 1 Reply Last reply Oct 30, 2022, 6:24 PM Reply Quote 0
                              • N
                                netboy @rcoleman-netgate
                                last edited by Oct 30, 2022, 6:24 PM

                                @rcoleman-netgate You are on the money!!! I had daisy chained the switch which was in port 1 and port 3 because my standby router had only one port and was waiting for 2100 to arrive. Newbie mistake!!! Thanks for pointing this out!

                                I have now removed the daisy chain ethernet cable connecting switches which were in port 3 and port 1.

                                Web gui works fine.

                                Thank you for baby sitting me!

                                R 1 Reply Last reply Oct 30, 2022, 6:26 PM Reply Quote 1
                                • R
                                  rcoleman-netgate Netgate @netboy
                                  last edited by Oct 30, 2022, 6:26 PM

                                  @netboy Yeah, don't do that :) It does bad things -- as you have seen. :)

                                  Ryan
                                  Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                                  Requesting firmware for your Netgate device? https://go.netgate.com
                                  Switching: Mikrotik, Netgear, Extreme
                                  Wireless: Aruba, Ubiquiti

                                  N 1 Reply Last reply Oct 30, 2022, 6:34 PM Reply Quote 0
                                  • N
                                    netboy @rcoleman-netgate
                                    last edited by netboy Oct 30, 2022, 6:35 PM Oct 30, 2022, 6:34 PM

                                    @rcoleman-netgate I need help in firewall rules.

                                    I want 192.16.0.XXX subnet to go to internet and talk to 172.16.0.XXX subnet but I want to BLOCK 172.16.0.xxx to 192 subnet - 172 can talk to internet (allow). This is my existing firewall rules.

                                    IoTP4 is 172.16.0.XXX

                                    4d6980c6-6e4c-47e0-b623-5d278fd97bc3-image.png

                                    d4112993-8b0e-4c0a-8657-aab353240795-image.png

                                    38124c13-4538-4757-a44c-b2c05a954a42-image.png

                                    R 1 Reply Last reply Oct 30, 2022, 6:39 PM Reply Quote 0
                                    • R
                                      rcoleman-netgate Netgate @netboy
                                      last edited by Oct 30, 2022, 6:39 PM

                                      @netboy So block on LAN interface anything with a SOURCE address of IOTP4 Network. Put that above your "allow all traffic" rule

                                      Ryan
                                      Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                                      Requesting firmware for your Netgate device? https://go.netgate.com
                                      Switching: Mikrotik, Netgear, Extreme
                                      Wireless: Aruba, Ubiquiti

                                      N 1 Reply Last reply Oct 30, 2022, 6:42 PM Reply Quote 0
                                      • N
                                        netboy @rcoleman-netgate
                                        last edited by netboy Oct 30, 2022, 6:46 PM Oct 30, 2022, 6:42 PM

                                        @rcoleman-netgate on the LAN firewall (192) BLOCK IoT (172) and this must be the FIRST rule. Have I got it right? On drop down there are two options IOTP4 address and IOTP4 net - which one to select as source

                                        Below correct?

                                        e08ec21a-9b3c-4b6b-9064-92bb20e99fa8-image.png

                                        R 1 Reply Last reply Oct 30, 2022, 6:47 PM Reply Quote 0
                                        • R
                                          rcoleman-netgate Netgate @netboy
                                          last edited by rcoleman-netgate Oct 30, 2022, 6:47 PM Oct 30, 2022, 6:47 PM

                                          @netboy That will only block HTTP and HTTPS but not Ping or DNS

                                          Set the traffic to ANY type, not TCP.

                                          And, as I said, IOT Network, not IOT Address :)

                                          Ryan
                                          Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                                          Requesting firmware for your Netgate device? https://go.netgate.com
                                          Switching: Mikrotik, Netgear, Extreme
                                          Wireless: Aruba, Ubiquiti

                                          N 1 Reply Last reply Oct 30, 2022, 6:48 PM Reply Quote 0
                                          40 out of 67
                                          • First post
                                            40/67
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received