VLan Uplink Port

[karldenton]

Hi,

Go easy as its first time I've used vlans.

 

Just setting up a separate vlan for the iPads to go out to the internet.

All setup on the UTM no problem.

On the core switch, I can plug in a wifi box, (tag it on the iPad vlan) and the clients get the iPad range of IP addresses. Make it not a member and it doesn't work, which is how it should be.

 

I've tagged the 4 uplink ports from the other switches.

 

My question is, without breaking it, do I also tag the uplink port on the edge switch? When I tried it in testing, it then made it not a member of the default vlan which meant normal computers couldn't uplink from it. They are HP 1920. Do I need to set the port type as hybrid / trunk as well?

 

And, can you just tag every port on every switch on each vlan or is that not good practice? Would save me finding out which port each wifi point is plugged into

Edited October 11, 2017 by karldenton

[jthompson]

The uplink ports on your edge switches will need the VLAN configured also. We don't use HP switches here, and different vendors vary in their terminology, but essentially you should be able to configure those ports as tagged for the iPad VLAN, but untagged for your regular default VLAN traffic. That way they serve your regular network as before, but also forward the extra VLAN packets on to the core switch. You'll also need to configure the ports into which your WAPs are patched. Whether that's tagged or untagged for your iPad VLAN will depend on the WAP vendor and how they're configured, but probably the former.