VLAN on DLink DES-3226S

[Bkhong]

I faced some difficulties in configuring several VLANs using the DLink Des-3226S Layer 2 Switch.

I am trying to set up 2 VLAN. Port 1 would be connected to the WAN, Port 2 will be VLAN 1, port 3 will be VLAN 2. The problem is that the manuals, both the user guide and Command Line Interface manual are of no help at all.

If I set Port 1,2 and 3 as "Untagged" in the 802.1Q VLAN setting, the LAN is not segmented. If I set Port 1,2 and 3 as "Tagged", the LAN became segmented but are unable to connect to the Internet.

What I am trying to do is to make to 2 VLANs in the LAN, both are able to connect to the Intenet but are oblivious to each other.

Can anyone with prior experience with this switch help? Attached is the screenshot of the config screen.

[Siliconjunkie]

I believe you have set the switch up right. Creating VLANS effectively seperates the ports so they cant see each other. This achieves half your goal, of them being oblivious to each other.

The 2 vlans will have to be 2 seperate subnets, each having their own gateway. They can both be the same physical device with an interface on each network and one going to the internet, ACLs will prevent them from seeing each other. This solves the internet problem.

If you have them both use the same gateway then they will be able to see one another and will both have to be on the same vlan as the gateway, thus see each other.

[Bkhong]

Thanks for tip. The problem still persists after I used a separate gateway. Attached is the topology. Maybe I got it wrong? (I new to networking!)

[Siliconjunkie]

Ok, looks like everyone should have internet access on that valn. Can 10.10.10.20 and .30 see eachother? Can the see .2? What kind of device is .2? Is .2 configured to be the gateway for .20 & .30?

[Bkhong]

.20 and .30 can see each other if i set port 2 and 3 as "untagged". If i set them as "tagged", they can't see each other but there goes the internet access.
As for the 10.10.10.2, i do not know what device it is, just the jack on the wall.

[Siliconjunkie]

Ok, so untagged everything is OK. Can 2 VLANS see eachother when the ports are untagged? What I am thinking is to make them 2 vlans but leave them untagged.

[Siliconjunkie]

Just did some reading on 802.1q and unless you have multiple switches that you want the VLAN to span tagging isnt needed.

"Sharing VLANs between switches is achieved by inserting a tag with a VLAN identifier (VID) between one and 4,094 into each frame. A VID must be assigned for each VLAN. By assigning the same VID to VLANs on many switches, one or more VLAN (broadcast domain) can be extended across a large network.

The secret to performing this magic is in the tags."

I would guess that the .2 device doesnt like the VLAN name you are using so it is ignoring the traffic.

[Bkhong]

If untagged port 1,2, and 3, the 2 VLANs can see each other, but it beats the purpose of using VLAN as I am trying to seperate them into two logical networks.

[Siliconjunkie]

You will need to create 2 vlans, I cant see enough in the config, but you have 1 named default. You will have to create a 2nd with another name. Then you will have to logical networks.

[Bkhong]

Here's another problem...I can attach one vlan to the switch setup. If I attach another...the new one will replace the previous one!