Issue with R605 router connected to Easy Smart Switches

Issue with R605 router connected to Easy Smart Switches
Issue with R605 router connected to Easy Smart Switches
2021-04-07 19:59:43 - last edited 3 weeks ago
Hardware Version: V1
Firmware Version:

There are 3 ISPs connecting to 3 WAN ports of a multi-wan router (previously it was R470T+ v4, now R605).

The 2 remaining ports of this router act as LAN ports and are connected to 2 easy smart switches (SG1024DE v4) that are configured with MTU VLAN.

The switches provide wired connection to flats of the building, 1 LAN port per flat. I need the LAN ports to be isolated from each other but getting internet from the R605.

 

We needed easy smart switches configured with MTU VLAN to be prepared for any router-on-a-stick situation because in the flats people can connect their devices either directly wired or using their own wifi router which may accidentally be configured as DHCP server which would act as rogue server in an unmanaged local network.

(The uplink port on the switches is port1, but that's irrelevant.)

 

When I replaced the R470T+ with the new R605, first I realized that its setup page deals with VLAN configuration differently from R470T+, so I just let it on default setup without creating different VLANs for the R605's LAN ports. I think all ports are on the default VLAN1 now. But I thought it doesn't really matter because the switches must isolate their LAN ports anyway. If I created different VLANs for the router's LAN ports, the only benefit would be isolating traffic between the two switches, right?

 

What happened was suddenly a router (TP-Link WR740N, connected to one switch port) started to act as rogue DHCP server, trying to give IP for other devices connected to other switch ports.

Note that there are several routers in router mode (DHCP on) connected to the switches and none of them caused this issue, none of them appeared as rogue server.

 

It didn't matter if I connected that rogue router to a different switch port or to the other switch, it kept acting as rogue server.

I find it odd.

 

One detail that might matter: the rogue router has the same IP range (192.168.10.x) as one of the ISP's router connected to the first WAN port, that is a (remotely controlled by the ISP) Ubiquity device that I don't have access to modify anything in it.

Is it possible that there is a flow, a bug on R605 that causes this mysterious issue?

The R605's LAN is set to a different IP range (192.168.6.x).

 

Do I have to setup the LAN ports on R605 with VLANs different from the default VLAN1 to avoid this issue? And if so, what would be that setup (in standalone mode)?

There are only instructions for router connected to L3 switches, creating different IP pools etc... that is not our case.

0
0
#1
Options
3 Replies
Re:Issue with R605 router connected to Easy Smart Switches
3 weeks ago - last edited 3 weeks ago

Dear @Arion,

 

Arion wrote

When I replaced the R470T+ with the new R605, first I realized that its setup page deals with VLAN configuration differently from R470T+, so I just let it on default setup without creating different VLANs for the R605's LAN ports. I think all ports are on the default VLAN1 now. But I thought it doesn't really matter because the switches must isolate their LAN ports anyway. If I created different VLANs for the router's LAN ports, the only benefit would be isolating traffic between the two switches, right?

 

Compared with R470T+(or other non-Omada gateways), the current R605 (and ER7206) doesn't support Layer2 VLAN, devices can only obtain IP addresses from R605 on the default VLAN1 when it's working in Standalone mode.

 

So, just leave the default setup without creating different VLANs for the LAN ports on the R605, otherwise, devices not in VLAN1 may be unable to obtain IP addresses and access the Internet.

 

If you want to create different VLANs and assign different IP subnets for the LAN ports on the R605, please use Omada Controller to manage and configure the R605, with which you can create VLAN interfaces and configure the IP subnets accordingly.

 

One detail that might matter: the rogue router has the same IP range (192.168.10.x) as one of the ISP's router connected to the first WAN port, that is a (remotely controlled by the ISP) Ubiquity device that I don't have access to modify anything in it.

Is it possible that there is a flow, a bug on R605 that causes this mysterious issue?

The R605's LAN is set to a different IP range (192.168.6.x).

 

From the behavior, it seems that the WR740N is connected to the front SG1024DE switch via LAN port instead of via WAN port.

Could you please check the physical connection between them?

It should be okay if the front switch is connected to the WAN port of the WR740N router.

Best Regards!
0
0
#3
Options
Re:Issue with R605 router connected to Easy Smart Switches
3 weeks ago - last edited 3 weeks ago

@Fae 

Thanks for your reply.
Actually, I wouldn't mind not having different VLANs on the R605 if the LAN ports on the switches remain isolated from each other. I don't want any communication between the LANs on the switches, only providing internet from the main router, R605.

I'm just worried if that WR740N can hijack the whole network even if I configured the switches to isolate the LAN ports, the whole point of having these easy smart switches (replacing old unmanaged switches recently) was to avoid this issue. I thought it would make the network foolproof and if someone doesn't configure their router in a flat correctly, at worst case they won't have internet but won't interfere with others.

 

I'm wondering, to avoid this in the future:

Does the MTU VLAN setup on the switches means their uplink port is tagged or untagged?

Should I configure the LAN ports (connecting to the switches) on the R605 tagged or untagged?

If everything is on the default VLAN1 on the R605, does it mean that traffic from any VLAN on the switches gets connected in the R605 as if they weren't on different VLANs there initially?

Would it make any sense doing a work-around, choosing a rare IP range for the DHCP server on the R605, like 192.168.111.x and somehow blocking any communication in other IP pools?

0
0
#4
Options
Re:Issue with R605 router connected to Easy Smart Switches
3 weeks ago - last edited 3 weeks ago

I just read in another thread here that this R605 really has a serious issue with intervlan traffic always on. And I also read now that ACL won't rule out anything on the LAN of the router, only on the WAN ports. Really???

This is insane! What was the purpose of this router? (Other than being exclusively used in Omada ecosystem.) If its LAN ports will act as an unmanaged switch that connects every end devices regardless what you configured on "managed" switches.

Unfortunately I can't send the product back and ask a refund as the days had passed before I could have this important information about the limitation/deficiency of this router.

Now I guess I'll have to replace it back with the old R470T+ and wait some months or years for a firmware update of the R605.

 

People need to be informed about this limitation on the product's page!

And it should be helpful to know if the company is planning to solve this issue.

 

It's also not clear and needs to be answered if I can configure the router with Omada software that is not always on? And whether the necessary rules will cooperate with easy smart switches.

Because if you don't have Omada enabled switches and EAPs, it's really wasteful to buy an OC200 or operate a connected computer 24/7.

0
0
#5
Options