Will this VLAN work? (2x TL-SG108E)

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Will this VLAN work? (2x TL-SG108E)

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Will this VLAN work? (2x TL-SG108E)
Will this VLAN work? (2x TL-SG108E)
2023-03-03 16:28:43 - last edited 2023-03-03 16:30:33
Model: TL-SG108E  
Hardware Version: V6
Firmware Version: 1.0.0 Build 20230218 Rel.50633

I have never tried to do a VLAN, but read a few articles, so hopefully the below will work.

 

I want to separate my wife office computer from our home network. She will only use Ports 6 and 7 on Switch B in her office. Our router, an ER605 V2 is in my office and connected to Port 1 on Switch A. Both switches are connected to each other on Port 8.

 

 

Switch A connected to router (ER605 V2) on Port 1

 

VLAN 1: 1-8

VLAN 2: 1-8

VLAN 3: 1,8

 

Untagged Ports: 1-7

Tagged Ports: 8

 

PVID 1: Port 1.8

PVID 2: Port 2-7

 

Switch B connected to Switch A on Port 8

 

VLAN 1: 1-8

VLAN 2: 1-5

VLAN 3: 6-8

 

Untagged Ports: 1-7

Tagged Ports: 8

 

PVID 1: Port 8

PVID 2: Port 1-5

PVID 3: Port 6-7

 

BTW, thanks in advance!

  0      
  0      
#1
Options
10 Reply
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-03 21:52:21
Looks good to me. Are you using different subnets for the different VLANs or what's going on with SwitchA-Port1 to prevent them hairpinning at Layer3?
<< Paying it forward, one juicy problem at a time... >>
  1  
  1  
#2
Options
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-03 22:53:10

  @d0ugmac1 

 

Thanks for the reply!

 

Had to look up hairpinning... What would be the downside? If it's a problem, I'll just put VLAN 3 on a different subnet than VLAN 2.

  0  
  0  
#3
Options
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-04 11:00:45

Hi  @Hemicrusher 

 

You have LAN(VLAN) interface created on the ER605 right?

 

The uplink port of your switch A(I think it is the port 1) should be tagged on all VLANs

Best Regards! >> Omada EAP Firmware Trial Available Here << >> Get the Latest Omada SDN Controller Releases Here << *Try filtering posts on each forum by Label of [Early Access]*
  0  
  0  
#4
Options
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-04 15:34:47 - last edited 2023-03-04 15:46:23

  @Hank21 

 

I'll tag Port 1 on Switch A to the router (ER605), then create a VLAN in the ER605. Switch A will connect to Port 5 on the ER605, so should it look like this? 

 

Port 1 is WAN, Port 5 to Switch A

 

VLAN 1: 1-5

VLAN 2: 1,5

VLAN 3: 1,5

 

Untagged Ports: 1-5

 

Or do I Tag Port 5, and leave Port 1 Untagged?

 

 

 

 

Thanks for your help.... I appreciate it.

 

 

 

  0  
  0  
#5
Options
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-04 17:02:42 - last edited 2023-03-04 17:05:10

If you tag the uplink port of the switch you tag port.5 of the router. Port 1 is untagged, unless you have some funky PPPoe FTTH like I do.

 

Also they are vLANs not vWANs on the routers.  Most internet uplinks are untagged.

<< Paying it forward, one juicy problem at a time... >>
  1  
  1  
#6
Options
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-04 17:37:55 - last edited 2023-03-04 21:44:17

  @d0ugmac1 

 

Okay, that makes sense.

 

I'll have three VLANs, VLAN 1 is default, VLAN 2 is my home, and VLAN 3 is my wife office computer. If I put VLAN 3 on a different subnet, will VLAN 2 still be on the same subnet as VLAN 1, or do I have to specify the subnet of VLAN 2?

 

Edit:Thinking about DHCP and being able to access the router from VLAN 2. If I am just trying to keep my wife's computer separate, do I need another VLAN for my home devices?... Three VLANs like I stated above, or can I just have two VLANs? VLAN 1 for home, and VLAN 2 for my wife's work computer?

 

Sorry for all the questions.

 

Thanks for all your help.

  0  
  0  
#7
Options
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-04 23:28:21
2 VLANs should be enough, that's how I run things at one site. Put your wife's gear on one VLAN/subnet and everything else on another. Also keeps the ACLs simple..and you will still need ACLs in order to isolate the two subnets at the router though.
<< Paying it forward, one juicy problem at a time... >>
  2  
  2  
#8
Options
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-05 05:53:21

  @d0ugmac1 

 

Thanks for your help!

  0  
  0  
#9
Options
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-07 00:55:51 - last edited 2023-03-07 00:57:28

  @d0ugmac1 

 

BTW, thanks for all your help.

 

So, this is what I came up with to simplify things.

 

Router (ER605 V2) Port 1 is WAN, Port 5 to Switch A

VLAN 1: 1-5
VLAN 2: 1,5

 

Untagged Ports: 1-4
Tagged Ports: 5

 

Switch A (TL-SG108E) is connected to router (ER605 V2) on Port 1

 

VLAN 1: 1-8

VLAN 2: 1,8

 

Untagged Ports: 2-7

Tagged Ports: 1,8

 

PVID 1: Port 1-8

 

 

Switch B (TL-SG108E) is connected to Switch A on Port 8

 

VLAN 1: 1-8

VLAN 2: 6-8

 

Untagged Ports: 1-7

Tagged Ports: 8

 

PVID 1: Port 1-5,8

PVID 2: Port 6-7

  0  
  0  
#10
Options
Re:Will this VLAN work? (2x TL-SG108E)
2023-03-07 14:42:58

Contacted support, and this is what they said...

 

If you just want to isolate those devices that connect to the switch B, you can directly create a new VLAN on switch B, including the uplink port 8 and downlink port6&7 as untagged, set PVID of downlink ports 6&7 same as the VLAN ID. Please see the link: https://www.tp-link.com/en/support/faq/788/

 

Anyhow....I was way over thinking this.

 

Thanks for everyones help!

 

 

  0  
  0  
#11
Options

Information

Helpful: 0

Views: 998

Replies: 10

Related Articles