i would need a simple configuration for my new HP 1920 with 8 ports switch; i never configured a L3 switch;
- i have some PCs with statics IP 192.168.1.x on the main LAN with a firewall to go on internet (192.168.1.1) and other common unmanaged switch;
- and i have some PCs with statics ip 128.1.2.x on the secondary LAN;
I would like configure HP 1920 to let the two LANs PCs be able to communicate each other as they would be in the same LAN (with ping, shared folders, printers, etc), with no changes on ports 1 (i like to leave it with original HP configuration), with ports 2 to 4 dedicated the main LAN 192.168.1.x and ports 5 to 8 dedicated to the secondary LAN 128.1.2.x) and without change computers and printers static IP; the secondary LAN should also connect to internet through the firewall of the main LAN.
The static VLAN interfaces IP could be 192.168.1.200 and 128.1.2.200
After that it is also possible add some rules to use the switch as a firewall between the two LANs? (this information is not so important)
Sorry for my bad english; i hope my request is clear and not complicated.
If you simply configure routing on the switch for VLAN2, you will end up with asymmetric routing.
You have 2 Layer3 devices and 2 VLANs so your network design includes 3 segments.
So you need 3 subnets (and so 3 VLANs).
VLAN1 192.168.1.0/24, put 192.168.1.2 on the switch for the VLAN interface VLAN10 192.168.10.0/24, put 192.168.10.1 on the switch for the VLAN interface VLAN20 192.168.20.0/24, put 192.168.20.1 on the switch for the VLAN interface
The switch needs a default route: 0.0.0.0 0.0.0.0 192.168.1.1 The router needs 2 routes: 192.168.10.0/24 --> 192.168.1.2 192.168.20.0/24 --> 192.168.1.2
---- OR---- (Assuming your router supports VLAN trunks)
Don't do any routing on the switch.
Trunk the new VLAN to the router : add it to the switch uplink as "tagged". Create the new VLAN on the router and put the new subnet router address on that interface. Add the new VLAN as tagged to the uplink from the switch. This might be a subinterface or a VLAN interface, depending on your router.
