屋企set vlan

xpking

請問一下各位，我想屋企set 2個vlan
我有asus ac68u router
因為唔夠port，想買TP-Link TL-SG108E switch
買咗後想set 2個vlan，2個vlan都要上到網但2個vlan唔可以溝通
想問下做唔做到?
Thanks.

觀星是答案

請問一下各位，我想屋企set 2個vlan
我有asus ac68u router
因為唔夠port，想買TP-Link TL-SG108E switch
...
xpking 發表於 2020-9-24 20:18

ac68u 原裝 firmware 唔 support VLAN

xpking

ac68u 原裝 firmware 唔 support VLAN
觀星是答案 發表於 2020-9-24 20:26

我想用TP-Link TL-SG108E set vlan，唔係用router set

觀星是答案

我想用TP-Link TL-SG108E set vlan，唔係用router set
xpking 發表於 2020-9-24 20:42

咁你既 traffic 都會經隻 router 打通左

volospin

elaborate on what 觀星是答案 said + my understand

since your ASUS AC68U stock firmware does not support VLAN
therefore unable to do even you have TP-Link TL-SG108E
because

assume your TP-Link TL-SG108E set VLAN
VLAN 1 = switch port 1 / 3 / 5 / 7
VLAN 2 = switch port 2 / 4 / 6 / 8
then your router need to set VLAN assume
VLAN 1 = router port 1 and connects to switch port 1 as uplink
VLAN 2 = router port 2 and connects to switch port 2 as uplink
in order to separate both VLAN segment and able to access Internet.
results in only 3 devices per VLAN can be connected to a 8 ports smart switch

Easiest to implement answer is
ISP A -> router B-> physical network A (devices)
ISP B -> router B-> physical network B (devices)
easy to maintain without special knowledge.

ISP A and ISP B can be the same ISP but must be different line

Tom_jerry

我想用TP-Link TL-SG108E set vlan，唔係用router set
xpking 發表於 2020-9-24 20:42

刷第3方firmware就可以了鳥

X-Engineer

樓主隻Router有冇ACL set?

如果有, set cannot communicate between VLANs 加埋樓上師兄答案, 可能work

VLAN 10 : 192.168.10.0
VLAN 20 : 192.168.20.0

Action + Source Subnet + Source Widecard Mask + Destination Subnet + Destination Widecard Mask + Protocol

deny ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255 any
deny ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255 any
Permit ip any any