Business Community > All Threads > Simple office network - where to start with TL-R600VPN and T1600G-52PS
< All Threads

Simple office network - where to start with TL-R600VPN and T1600G-52PS

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Simple office network - where to start with TL-R600VPN and T1600G-52PS

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Simple office network - where to start with TL-R600VPN and T1600G-52PS
Simple office network - where to start with TL-R600VPN and T1600G-52PS
2020-10-24 21:41:30 - last edited 2021-04-18 10:46:51
Model: TL-R600VPN  
Hardware Version: V4
Firmware Version:

Hi,

 

Just bought the TL-R600VPN and T1600G-52PS and now I want to set them up with the following requirements...

TL-R600VPN WAN: 192.168.1.x/24 given by DHCP from ISP & LAN: 192.168.0.1

2 Access Vlans,

One with 10 ports (Gi10/3-12) for camera's and IOT devices that connect independently to the cloud - Vlan ID 26, name IoTandCAMVlan

One with all the ports higher than Gi1/0/12 for the local lan devices - vlan ID 62 - UserVlan

If it can be done, I would want the management interfaces of the router and switch to be in a different mgmt vlan, and that access from User and IoTandCAMVlan is not possible to this mgmt vlan.

The IoTandCAMVlan and UserVlan need internet access. They both need their DHCP scopes created on the switch and distributed

T1600G-52PS: 

IoTandCAMVlan: int vlan 192.168.26.253 192.168.26.0/24

UserVlan: int vlan 192.168.62.253 192.168.62.0/24

Management int vlan 192.168.0.253 

What would be the best possible design in terms of bandwitdh capabilities to both VLANs (The devices and ISP router are supercleanly racked and cabled so intradevice cable failure is very unlikely, physical redundancy is a nice-to-have IMHO)? The TL-R600VPN doesn't seem to be able to create subinterfaces - is this correct? So a trunk between TL-R600VPN's interfaces G1/0/4-5 and T1600G-52PS interfaces Gi1/0/1-2 is not possible to setup?

Is setting up an lacp between 2 LAN ports from the TL-R600VPN (Gi1/0/4-5) and the T1600G-52PS's Gi10/01-2 beneficial at all for bandwitdh? 

I am familiar with CCNA concepts, but it is new to me to tie it all together in an optimal way, so if someone would give me a high-level design tip, and the steps to get there - would be helpfull - I really want to configure it by myself as a learning process

 

Thx

 

J-HieronymosX

  0      
 
  0      
 
#1
Options
1 Accepted Solution
Re:Simple office network - where to start with TL-R600VPN and T1600G-52PS-Solution
2020-10-27 22:16:03 - last edited 2021-04-18 10:46:51

@HieronymosX 

 

Solved: https://www.tp-link.com/cz/support/faq/887/

Recommended Solution
  0  
  0  
#4
Options
3 Reply
Re:Simple office network - where to start with TL-R600VPN and T1600G-52PS
2020-10-25 18:46:07 - last edited 2021-04-18 10:46:51

@HieronymosX 

 

So I got a got further ... this is now the switch config

 

!T1600G-52PS
#
vlan 10
name "MGMT"
#
vlan 26
name "IOTCAM"
#
vlan 62
name "USER"
#
#
hostname "Switch"  
location "Brussels"
contact-info "xxxxxxxxx@gmail.com"
#
#
system-time ntp UTC+08:00 133.100.9.2 139.78.100.163 12
no system-time dst
#
#
#
user name AAAAdmin privilege admin secret 5 $1$E0C4@F=$)]{%
user name admin privilege admin secret 5 $1$E0CG6B2F=$)]{%
no service reset-disable
#
#
#
#
#
service dhcp server
ip dhcp server excluded-address 192.168.10.1 192.168.10.10
ip dhcp server excluded-address 192.168.10.250 192.168.10.254
ip dhcp server excluded-address 192.168.26.1 192.168.26.10
ip dhcp server excluded-address 192.168.26.250 192.168.26.254
ip dhcp server excluded-address 192.168.62.1 192.168.62.10
ip dhcp server excluded-address 192.168.62.250 192.168.62.254

#
ip dhcp server pool "IOTCAM"
network 192.168.26.0 255.255.255.0
default-gateway 192.168.26.254
dns-server 192.168.0.1
#
ip dhcp server pool "USER"
network 192.168.62.0 255.255.255.0
default-gateway 192.168.62.254
#
ip dhcp server pool "MGMT"
network 192.168.10.0 255.255.255.0
default-gateway 192.168.10.254
#
#
#
#
#
#
ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip route 192.168.10.0 255.255.255.0 192.168.10.254
ip route 192.168.26.0 255.255.255.0 192.168.26.254
ip route 192.168.62.0 255.255.255.0 192.168.62.254
#
#
#
power inline consumption 384.0
#

#
#
#
#
#
#
interface vlan 1
  no ip address
  ipv6 enable
#
interface vlan 10
  ip address 192.168.10.254 255.255.255.0
  description "MGMT"
  no ipv6 enable
#
interface vlan 26
  ip address 192.168.26.254 255.255.255.0
  description "IOTCAM"
  no ipv6 enable
#
interface vlan 62
  ip address 192.168.62.254 255.255.255.0
  description "UserVLAN"
  no ipv6 enable
#
interface gigabitEthernet 1/0/1
  no switchport
  ip address 192.168.0.2 255.255.255.248
  no ipv6 enable
  no ip igmp snooping
  no ipv6 mld snooping
#
interface gigabitEthernet 1/0/2

#
interface gigabitEthernet 1/0/3
  switchport general allowed vlan 26 untagged
  switchport pvid 26
  no switchport general allowed vlan 1

...ports all configured same

#
interface gigabitEthernet 1/0/12
  switchport general allowed vlan 26 untagged
  switchport pvid 26
  no switchport general allowed vlan 1

#
interface gigabitEthernet 1/0/13
  switchport general allowed vlan 62 untagged
  switchport pvid 62
  no switchport general allowed vlan 1

 

...ports all configured the same

 

#
interface gigabitEthernet 1/0/46
  switchport general allowed vlan 62 untagged
  switchport pvid 62
  no switchport general allowed vlan 1

#
interface gigabitEthernet 1/0/47
  switchport general allowed vlan 10 untagged
  switchport pvid 10
  no switchport general allowed vlan 1

#
interface gigabitEthernet 1/0/48
  switchport general allowed vlan 10 untagged
  switchport pvid 10
  no switchport general allowed vlan 1

#
interface gigabitEthernet 1/0/49
  switchport general allowed vlan 62 untagged
  switchport pvid 62
  no switchport general allowed vlan 1

#
interface gigabitEthernet 1/0/50
  switchport general allowed vlan 62 untagged
  switchport pvid 62
  no switchport general allowed vlan 1

#
interface gigabitEthernet 1/0/51
  switchport general allowed vlan 62 untagged
  switchport pvid 62
  no switchport general allowed vlan 1

#
interface gigabitEthernet 1/0/52
  switchport general allowed vlan 62 untagged
  switchport pvid 62
  no switchport general allowed vlan 1

#
end

 

The clients connecting to the ports get the right IP addresses from DHCP scope, and they can each ping vlan specific default gateway on 192.168.xx.254

The switch can ping 8.8.8.8, so has internet access

But I cannot ping intervlan, nor have internet access on the vlans

 

The router cannot do CLI (bummer) so I need to describe the settings...

Routing table

1    192.168.62.0    255.255.255.0    0.0.0.0    LAN    0

2    192.168.10.0    255.255.255.0    0.0.0.0    LAN    0
3    0.0.0.0              0.0.0.0                192.168.1.1    WAN1    0
4    127.0.0.0          255.0.0.0            0.0.0.0    lo    0
5    192.168.0.0     255.255.255.248 0.0.0.0    LAN    0
6    192.168.1.0     255.255.255.0     0.0.0.0    WAN1    0
7    192.168.1.1     255.255.255.255 0.0.0.0    WAN1    0

 

Router has internet access, when I connect a client to port G1/0/3 and give manual IP of e.g. 192.168.0.3/255.255.255.248, I have internet access on the client. Also, as said, the switch itself has a route to internet...

 

Any advice?

 

Thx

 

J-HieronymosX

  0  
  0  
#2
Options
Re:Simple office network - where to start with TL-R600VPN and T1600G-52PS
2020-10-25 19:13:58 - last edited 2021-04-18 10:46:51

@HieronymosX 

 

I removed these lines from the routing table of the switch and now intervlan ping is working...but not the internet access...

 

ip route 192.168.10.0 255.255.255.0 192.168.10.254
ip route 192.168.26.0 255.255.255.0 192.168.26.254
ip route 192.168.62.0 255.255.255.0 192.168.62.254

 

Routing table now only has default route 0.0.0.0 0.0.0.0 192.168.0.1 (the IP of the Gi1/0/5 on the router)

 

How do I achieve internet access on the vlan 62 and 26?

 

Thx

 

J

  0  
  0  
#3
Options
Re:Simple office network - where to start with TL-R600VPN and T1600G-52PS-Solution
2020-10-27 22:16:03 - last edited 2021-04-18 10:46:51

@HieronymosX 

 

Solved: https://www.tp-link.com/cz/support/faq/887/

Recommended Solution
  0  
  0  
#4
Options

Information

Helpful: 0

Views: 1369

Replies: 3

Related Articles
Client VPN to Office VPN
1334 0
help with creating a simple VPN with TLR600VPn
2069 0
Simple 1 to 1 NAT set-up
2152 0
Create a simple mesh network
419 0
Simple point to point network
811 0
Network Design for Small Office
2575 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.