標題: 屋企set vlan [打印本頁]

---

作者: xpking    時間: 2020-9-24 20:18     標題: 屋企set vlan

請問一下各位，我想屋企set 2個vlan
我有asus ac68u router
因為唔夠port，想買TP-Link TL-SG108E switch
買咗後想set 2個vlan，2個vlan都要上到網但2個vlan唔可以溝通
想問下做唔做到?
Thanks.

---

作者: 觀星是答案    時間: 2020-9-24 20:26


ac68u 原裝 firmware 唔 support VLAN

---

作者: xpking    時間: 2020-9-24 20:42


我想用TP-Link TL-SG108E set vlan，唔係用router set

---

作者: 觀星是答案    時間: 2020-9-24 20:50


咁你既 traffic 都會經隻 router 打通左

---

作者: volospin    時間: 2020-9-25 16:54

本帖最後由 volospin 於 2020-9-25 16:56 編輯

elaborate on what 觀星是答案 said + my understand

since your ASUS AC68U stock firmware does not support VLAN
therefore unable to do even you have TP-Link TL-SG108E
because

assume your TP-Link TL-SG108E set VLAN
VLAN 1 = switch port 1 / 3 / 5 / 7
VLAN 2 = switch port 2 / 4 / 6 / 8
then your router need to set VLAN assume
VLAN 1 = router port 1 and connects to switch port 1 as uplink
VLAN 2 = router port 2 and connects to switch port 2 as uplink
in order to separate both VLAN segment and able to access Internet.
results in only 3 devices per VLAN can be connected to a 8 ports smart switch

Easiest to implement answer is
ISP A -> router B-> physical network A (devices)
ISP B -> router B-> physical network B (devices)
easy to maintain without special knowledge.

ISP A and ISP B can be the same ISP but must be different line

---

作者: Tom_jerry    時間: 2020-9-25 17:41


刷第3方firmware就可以了鳥

---

作者: X-Engineer    時間: 2020-9-26 04:10

本帖最後由 X-Engineer 於 2020-9-26 04:18 編輯

樓主隻Router有冇ACL set?

如果有, set cannot communicate between VLANs 加埋樓上師兄答案, 可能work

VLAN 10 : 192.168.10.0
VLAN 20 : 192.168.20.0

Action + Source Subnet + Source Widecard Mask + Destination Subnet + Destination Widecard Mask + Protocol

deny ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255 any
deny ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255 any
Permit ip any any