Business Community > Switches > T2600G-28TS GUI access through management VLAN
< Switches

T2600G-28TS GUI access through management VLAN

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

T2600G-28TS GUI access through management VLAN

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
T2600G-28TS GUI access through management VLAN
T2600G-28TS GUI access through management VLAN
2018-03-15 06:05:56
Model :

Hardware Version :

Firmware Version :

ISP :

Hi All.

I'd need help in the following:
I have 3 switches mentioned in Title.
I'd like to configure them to be managed through management vlan only.
sw2 and sw3 connecting to sw1 through 2port-LAG
LAGs are in TRUNK mode and members of management VLAN and systemVLAN(1), PVID=1

As I thought If I want to use them in the way mentioned, have to setup routing too.
Upon creating an interface in Routing with management vlanid and the specific IP, I'm able to ping them but GUI doesn't work.

Do I forgot something?

Thanks
  0      
 
  0      
 
#1
Options
8 Reply
Re:T2600G-28TS GUI access through management VLAN
2018-03-15 20:27:11

klukacs wrote

Do I forgot something?


You could use ACLs to restrict mgmt access for a certain subnet/VLAN.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#2
Options
Re:T2600G-28TS GUI access through management VLAN
2018-03-18 03:53:11
Hi R1D2,

Thanks for the answere.

I checked ACL section but no ACLs are in place.
If I enable NAT on firewall's interface, the connection succeeds to GUI.
When I set an Interface under Routing with e.g 172.20.100.13/24 amd vlan id = 20, routing table next hop field shows 172.20.100.13, no gateway setting possibility. I may missunderstood something written in manual.
I'd like to Access the gui from different subnet without NAT.
Do I need other settings too in order to achieve it or this should work.

Thanks
  1  
  1  
#3
Options
Re:T2600G-28TS GUI access through management VLAN
2018-03-18 21:20:23

klukacs wrote

I checked ACL section but no ACLs are in place.


You would have to create ACLs to restrict web UI access to the switch. That's not really an elegant replacement for a mgmt VLAN, but it should work for restricting/allowing access to the mgmt interface of the switch.

As you discovered already, if virtual interfaces have been created for Inter-VLAN routing, the web UI of the switch can be reached through this interface, too. Although there is a setting Admin Status in the Routing -> Interface Config menu, which looked to me like administrative access can be denied here, it seems to mean something other. Setting Admin Status to Disable shuts down the interface, so I'm not sure wether this setting is really meant to prohibit mgmt access as its name suggests or wether routing through this interface is denied at all.

According to the manual: Admin Status: Displays the Admin status. Choose Disable to disable the interface's Layer 3 capabilities.

Makes not much sense to me to name this function " Admin Status". " Interface Status" would be more intuitive.

If I enable NAT on firewall's interface, the connection succeeds to GUI.
When I set an Interface under Routing with e.g 172.20.100.13/24 amd vlan id = 20, routing table next hop field shows


Wait a moment: are you using the switch on the WAN side with a public IP? Maybe you can draw a picture of the network topology to make it more clear from which system you want to be able to access the mgmt interfaces of the switch.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#4
Options
Re:T2600G-28TS GUI access through management VLAN
2018-03-19 01:22:36

R1D2 wrote


Wait a moment: are you using the switch on the WAN side with a public IP? Maybe you can draw a picture of the network topology to make it more clear from which system you want to be able to access the mgmt interfaces of the switch.


No, I'm using it in local Network environment with C type address ranges 192.168.x.y

but as I know 172.16.0.0 - 172.31.255.255 are also belongs to private ranges as described in RFC 1918, and I can reduce the number of hosts with masking.. ..or am I wrong?
  0  
  0  
#5
Options
Re:T2600G-28TS GUI access through management VLAN
2018-03-19 01:43:59
Ups, yes, my fault. Sorry. I had 172.16.0.0/15 in mind, but it's indeed 172.16.0.0/12, you're right. Do you have set static routes back to the VLAN(s) from which you want to access the switch?
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#6
Options
Re:T2600G-28TS GUI access through management VLAN
2018-03-19 02:10:59
Ah, yes.. this should be the problem.. no static routes are set.
The switches actually reachable from the same subnet as management host is placed. So I have two interfaces one is in e.g 192.168.10.0/24 vlanID:1, GW: 192.168.10.254 the actual, and one is in e.g. 192.168.20.0/24 the management subnet, vlanID:20, GW: 192.168.20.254.
So I need a static route setting to 192.168.10.0/24 with next hop 192.168.20.254, right?
but this case I should have to erase the 192.168.10.0/24 interface
  0  
  0  
#7
Options
Re:T2600G-28TS GUI access through management VLAN
2018-03-19 02:36:02
Depends on the topology. If your 3 switches are connected to the GW, then this would be the next hop. If the switches are connected directly, you could use routed ports for next hops (Sw A Gi1/0/2 and Sw B Gi 1/0/1 in the example below):



༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#8
Options
Re:T2600G-28TS GUI access through management VLAN
2018-03-19 16:32:30
Hi R1D2,

Thanks for the help
  0  
  0  
#9
Options

Information

Helpful: 0

Views: 1922

Replies: 8

Related Articles
cannot access console through https for T2600G-28TS
202 0
T2600G-28 TS - Failed to get time from NTP Server
4380 0
T2600G-28TS - Port Status LED
292 0
T2600G-28TS: How to setup DMZ with VLAN and ACL
6463 0
T2600G-28TS VLAN configuration
1153 0
Mac vlan t2600g-28ts
1090 0
About Us
Press
Copyright © TP-LINK CORPORATION PTE. LTD. All rights reserved.