@SasoC 

Maybe I wasn't clear ... I want to achieve the functionality/scenario, described here: https://www.tp-link.com/us/support/faq/1630/ ... but using only my TL-SG3428X-M2 switch.

As I understand TL-SG3428X-M2 has "enough" L3 features to allow this.

Or maybe I don't understand this correctly and there must be always present separate device as DHCP server? In that case I can use my OPNSense for this purpose. But the whole point of purchasing TL-SG3428X-M2 was to manage all VLAN stuff inside the switch.

Regards,

Sašo

KJK wrote

  @SasoC 

 

If the DHCP server is configured on the switch and running, you probably just need to configure the access ports correctly. Have each access port untagged in a single VLAN and its PVID set to the VLAN's ID. 

@KJK , thank you for the answer, I think I didn't configure correctly VLAN interface or DHCP pool. I will let you know when I will make a progress.

Sašo

@Clive_A , thank you for the answer and the hint. I do have OPNSense router/firewall in the configuration (instead of ER605) and it provides me Internet. And I want to use switch as a DHCP server instead of OPNSense (like in your example with ER605 and TL-SG3428X). And I want to use ACLs on switch instead of firewall rules on OPNSense for enabling/disabling inter-vlan access (hope I understand this the right way ).

I think I made some mess with configuration of VLAN interfaces and DHCP pools on the switch. I will try to repeat exactly the steps, provided by you and I will let you know of a outcome.

Sašo

Hi  @SasoC,

I am not familiar with your exact model, but I expect this feature to be nearly similar to how it works on my TL-SG2218.

In my TL-SG2218 I've configured the DHCP server for multiple VLANs, which each use different IP subnets.

To achieve this, first I had to enable one Interface per VLAN on the switch (assign a static IP to the switch for each VLAN).

Then, under 'DCHP Server' you can create DHCP Pools for each VLAN.

Don't forget to Enable the DHCP server.

Hope this answers your question.

Regards,

Steely

  @SteelyDunes , thank you for the answer. Yes, defining the interface was my missing part. Now I get IP addresses as expected.

Now I fight the ACL rules for restricting inter VLAN communication, but I will create new thread about this.