ER605

ER605

ER605
ER605
Yesterday
Hardware Version: V2
Firmware Version: 2.3.0

Hello everyone,

I am currently reaching the limits of my network knowledge, especially with regard to VLAN configuration.

For a standalone building with an internet connection via an AVM FritzBox LTE, I want to set up the following configuration, but I keep failing. This means that all devices receive IP addresses from the address range 192.168.0.1/24, even though I believe I have configured the LANs, VLANs, associated DHCP servers, and address ranges correctly.
The WAN port on the ER605 is connected to a network port on the Fritzbox. The internet connection is stable. The administration PC is assigned an IP address from the 192.168.0.1/24 address range. The IP address 192.168.0.1 is specified as the gateway. (ipconfig/all)
LAN 1
VLAN 10 (physical LAN port 1 on the ER605) is connected to port 8 of the TL-SG108PE (V5.0). The IP range is set to 192.168.aab.1/24. The TL-OC200 is connected to port 1 of the TL-SG108PE, and the administration PC is connected to port 7.
LAN 2
VLAN 20 (physical LAN port 2 on the ER605) is connected to port 16 on the TL-SG1016PE-2 (V6.0). Switch ports 9 - 15 should belong to VLAN 20. These ports supply the components of the photovoltaic system and the heating system. All connected devices should be assigned a fixed IP address from the 192.168.aac.1/24 address range.
VLAN 30 (physical LAN port 2 on the ER605) is connected to port 16 on the TL-SG1016PE-2. Six EAP653s and one AX1800 (outdoor) are connected to ports 2–8. Both the private network and a guest network should run on the seven APs. All APs should be assigned fixed IP addresses from the 192.168.aad.1/24 address range by the DHCP server.
LAN 4
VLAN 40 (physical LAN port 3 on the ER605) is connected to port 1 of the TL-SG1016PE-1. 5 IP cameras are connected to switch ports 2 - 6.  The cameras should be assigned fixed IP addresses from the 192.1668.aae.1/24 address range.
VLAN 50: (physical LAN port 3 on the ER605) is connected to port 1 of the TL-SG1016PE-1. Switch ports 7 - 16 supply the RJ-45 sockets in the house and should be assigned their own IP addresses from the 192.168.aaf.1/24 address range.
My questions:
Is this configuration feasible with the existing components?
How must the LANs and VLANs be configured on the TL-ER605 for this configuration to work?
How must the VLANs be configured on the switches?
I know that the switches cannot be configured via the OC200, but that each switch must be configured individually.
Is it necessary to replace the existing switches with Omada switches in order to get the desired configuration up and running?

Thank you for your help.

Christian

  0      
  0      
#1
Options
2 Reply
Re:ER605
23 hours ago

  @CRS-IP 

 

If I read your post correctly, the following diagram shows what you are trying to do:

 

To answer your questions:

 

1.  Is this configuration feasible with the existing components?
This configuration is feasible with the existing components.

 

2. How must the LANs and VLANs be configured on the TL-ER605 for this configuration to work?
Each VLAN must have an interface on the ER605 and the DHCP server set up for each one.  I would configure the default VLAN (VLAN 1) as the management VLAN for the devices.  The result would be:
VLAN 1    192.168.0.0/24
VLAN 10    192.168.10.0/24 (where 10 replaces aab)
VLAN 20    192.168.20.0/24 (where 20 replaces aac)
VLAN 30    192.168.30.0/24 (where 30 replaces aad)
VLAN 40    192.168.40.0/24 (where 40 replaces aae)
VLAN 50    192.168.50.0/24 (where 50 replaces aaf)
The ER605 LAN ports will be trunk ports with VLAN 1 untagged and the rest will be tagged with their respective VLAN IDs.

 

3. How must the VLANs be configured on the switches?
The connection between the ER605 and the SG108 will be a trunk port with VLAN 1 untagged and VLAN 10 tagged.  Ports 1 and 7 of the SG108 should be configured as members of VLAN 1 and untagged (which makes them access ports).  As VLAN 10 appears to be unused, it could be eliminated.


The connection between the ER605 and the SG1016-1 will be a trunk port with VLAN 1 untagged and VLANs 10 and 20 tagged.  Ports 9 to 15 should be configured as access ports and be untagged members of VLAN 20.  Ports 2 to 8 should be configured as trunk ports with VLAN 1 untagged and VLAN 30 tagged.


The connection between the ER605 and the SG1016-2 will be a trunk port with VLAN 1 untagged and VLANs 40 and 50 tagged.  Ports 2 to 6 should be configured as access ports and be untagged members of VLAN 40.  Ports 7 to 16 should be configured as access ports and be untagged members of VLAN 50.

 

4. Is it necessary to replace the existing switches with Omada switches in order to get the desired configuration up and running?

No.
 

1x ER706W 1x OC300 4x SG2008 1x EAP610 2x EAP650
  0  
  0  
#2
Options
Re:ER605
17 hours ago

  @jra11500 

Hi,

that's it! Thank you very much. I will try it tomorrow.

KInd regards

CRS
 

  0  
  0  
#3
Options