T1500G-10MPS + OC200 + 3xEAP245 + trying to setup vlans - a little confused

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

T1500G-10MPS + OC200 + 3xEAP245 + trying to setup vlans - a little confused

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
T1500G-10MPS + OC200 + 3xEAP245 + trying to setup vlans - a little confused
T1500G-10MPS + OC200 + 3xEAP245 + trying to setup vlans - a little confused
2020-01-15 12:15:39
Model: Adapter  
Hardware Version: V3
Firmware Version:

I have a small PC setup with OPNsense firewall software.

 

The T1500G-10MPS switch is plugged in like this:

port 1 - LAN from router

port 2 - OC200

port 3 - EAP245-1

port 4 - EAP245-2

port 5 - EAP245-3

other ports empty for now

 

I'm trying to setup a VLAN 107 for IOT devices, and another VLAN 77 for another group of devices that i'd like to keep separate

 

the plan is to setup 3 separate SSID's for this within the OC200 with the VLAN setting for each one of these that seems easy enough. (famous last words,

I have the VLANs setup in the firewall with DHCP

 

I'm a little confused about how the VLAN tagging works in the switch.  I was looking for a trunk setting for ports 1-5 but I'm not understanding the settings or how i should add vlans to the vlans tagged/untagged to each port, and I'm unsure of what I should be setting for the PVID/acceptable frame types etc.

 

I don't really have experience with a managed switch like this and setting up vlans.

 

I've read through the manual about vlans, but its a little unclear and when I look up some generic vlan tutorial stuff, the settings/language seem different from the software configuration options in the dashboard.

 

any guidance would be appreciated

 

  0      
  0      
#1
Options
1 Reply
Re:T1500G-10MPS + OC200 + 3xEAP245 + trying to setup vlans - a little confused
2020-01-15 15:14:27 - last edited 2020-01-15 15:18:25

Hi @HumanityFirst,

 

you define a trunk port by assigning a port membership in two or more VLANs and set it to »tagged«. That's all. Access ports are always »untagged« ports, which are member of exactly one VLAN. In this case, the Port VLAN ID (PVID) equals the VLAN's ID.

 

There are special cases which break this rule (e.g. for Asymmetric VLANs), but let's ignore this for the sake of simplicity.

 

So, you need to set up 3 networks on your OPNsense router and assign those VLANs: 107 for IoT, 77 for OtherGroup and 2 (or whatever) for the regular LAN, let's call it »mgmt VLAN«. Next, you add ports 1, 3-5 of the T1500G-10MPS as tagged port to all three VLANs 2, 77 and 107. PVID doesn't matter, but you could set it to VID 2.

 

Port 2 for OC200 must be untagged and should be in mgmt VLAN, thus you add port 2 of the switch as an untagged member of VLAN 2 only.

 

Also remember to remove all ports 1-5 from the Default VLAN 1.

 

You now can choose to either set the »Management VLAN« setting in OC200 to 2 (it will only set the mgmt VLAN in EAPs, but not in OC200 itself) or to have the switch tag untagged mgmt traffic from the EAP with VID 2.

 

I prefer to set the mgmt VLAN explicitly in OC200. If you do so, too, for adoption of an EAP you will have to temporarily set the switch port the EAP is connected to as an untagged port of VLAN 2, so the OC200 gets initial traffic from the EAP. The OC200 then configures the EAP to use VLAN ID 2 for mgmt, thus you need to change the port back to tagged in order to complete the adoption.

 

Hope this helps. For more details, see this HowTo.

 

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#2
Options

Information

Helpful: 0

Views: 722

Replies: 1

Related Articles