@SasoC 

Maybe I wasn't clear ... I want to achieve the functionality/scenario, described here: https://www.tp-link.com/us/support/faq/1630/ ... but using only my TL-SG3428X-M2 switch.

As I understand TL-SG3428X-M2 has "enough" L3 features to allow this.

Or maybe I don't understand this correctly and there must be always present separate device as DHCP server? In that case I can use my OPNSense for this purpose. But the whole point of purchasing TL-SG3428X-M2 was to manage all VLAN stuff inside the switch.

Regards,

Sašo

KJK wrote

  @SasoC 

 

If the DHCP server is configured on the switch and running, you probably just need to configure the access ports correctly. Have each access port untagged in a single VLAN and its PVID set to the VLAN's ID. 

@KJK , thank you for the answer, I think I didn't configure correctly VLAN interface or DHCP pool. I will let you know when I will make a progress.

Sašo

@Clive_A , thank you for the answer and the hint. I do have OPNSense router/firewall in the configuration (instead of ER605) and it provides me Internet. And I want to use switch as a DHCP server instead of OPNSense (like in your example with ER605 and TL-SG3428X). And I want to use ACLs on switch instead of firewall rules on OPNSense for enabling/disabling inter-vlan access (hope I understand this the right way ).

I think I made some mess with configuration of VLAN interfaces and DHCP pools on the switch. I will try to repeat exactly the steps, provided by you and I will let you know of a outcome.

Sašo