Netgear VLAN GS274T Just checking!

[caffrey]

Have several cabs around the site with netgear GS724T switches (also GS724AT)

Story is, we needed guest wireless access.

 

So set up the wireless access points (dlink DWL-2100+) with multi SSID with secured (Domain wireless) going through vlan1 and unsecured (Guest) going through vlan2

 

Ive set up the switches like so :-

 

U - Untagged - T - Untagged

 

ports 1-3 are set aside for the wireless access points, 23 and 24 are generally fibre uplinks (GBIC)

 

VLAN 1 U U U U U U U U U U U U U U U U U U U U U U U U (dumb switch)

 

VLAN 2 T T T U U U U U U U U U U U U U U U U U U U T T

 

PVID 2 2 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1

 

 

(i also tag switch to switch uplinks)

 

all of the switches are set like this with the exception of the last switch before the internet router which looks like so

 

VLAN 1 U U U U U U U U U U U U U U U U U U U U U _ U U

 

VLAN 2 T T T U U U U U U U U U U U U U U U U T T T

 

(I'm guessing i can remove all the untagged ports on vlan2 and make them non members)

 

PVID 2 2 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 1 1

 

(note port 22 is tagged on vlan 2 and not a member of vlan 1 (port 22 is the link direct to the router))

 

This setup seems to be working, all traffic on vlan 1 is on the domain, working as it should (I hope!) And all traffic on vlan 2 is going straight to the router (soon to have a smoothwall box inbetween)

 

Also have GS724AT switches but for some reason as soon as you PVID any ports on vlan2 it removes the port from vlan1 and then you can't edit vlan 1 (annoying ) and the setup stops working (unless i'm doing something wrong!)

This is on the firmware update page with known issues and limitations...

 

# Only members of default VLAN (VLAN ID of 1) can manage the switch.

# Changing the default PVID would automatically remove the port from VLAN 1.

 

which is really no good for me i think.

 

all seems to work great, i'm just checking to make sure i've done it correctly - not done anything with vlans before!

(e.g. am i best sticking with ieee 802.1q vlans or port based )

 

footnote

 

If i put a smoothwall box on the end of vlan 2 - how can i access it using vlan 1 ?

I could put another nic in my machine i guess and join it to vlan 2 is this one way ?

 

Cheers

Mark

Edited August 4, 2010 by caffrey