Vlans 1820-8G / J9979A

[IvoRoliC4]

Hy,

Let me begin by saying I am novice at web managed switches and I bought one to learn how it can be set up. After looking at a bunch of tutorials on youtube and reading on various forums I am still not able to do what I intended. So as a last resort I decided to describe the setup I want to create and have some kind soul here provide me with easy to follow instructions on how to do it.

I connected some of my home network devices to my 1820-8G / J9979A switch as follows:

port 1 - router (LAN1 on router) - my internet access

port 2 - my PC

port 3 - my NAS

port 4 - my smart TV

port 5 - my network Printer

What I would like to do is to create two diffrent VLANS (let's say VLAN 10 and VLAN 20) and have:

my PC and NAS on VLAN 10

my smart TV on VLAN 20

leave the printer on VLAN 1?

I would like both VLAN 10 and 20 to have internet access but not be able to comunicate with each other. Also I would like to have VLAN 10 devices be able to use the printer.

How would I go about setting this up?

PS: please ignore the logic of what devices are in this example, I am tryign to learn the basics of VLANs and TRUNK-ing so I  can apply the same in a small business scenario.

[parnassus · Accepted solution]

Hi! Before provide any type of instructions you have to consider (and understand what it means) that your HPE OfficeConnect 1820-8G (SKU J9979A) is not capable of performing any Layer 3 - routing - operation. It's a Layer 2 device...it means that, while supporting VLAN tagging, you need an external router to perform Layer 3 duties (of that VLANs)...the consequence is that any ACL (Access Control List) should be deployed at that router level (probably your Router is also a Firewall and so access control policies can be easily configured there).

The preamble to say that:

1. Your Router will be the Router for your topology
2. Your Router will be the Firewall (for ACL) for your VLANs
3. Your VLANs will be defined on the Router (generally LAN1 interface should admit sub-interfaces, one for each added VLAN different from VLAN 1).
4. Your Router's LAN1 will carry VLANs above
5. Your Switch uplink port (to your Router) should be a tagged member of VLANs you define at Router level (say 10, 20) and untagged member of VLAN 1 (default) <- this can be changed to have all three VLANs tagged (and no VLAN untagged).
6. Your Switch duty will be to propagate various VLANs on various Ports (say Port 2 for your PC in VLAN 10 -> Port 2 should be untagged member of VLAN 10).
7. IP Addressing of VLAN interfaces is defined on Router (each Router's VLAN SVI will be the gateway for that subnet).  

[IvoRoliC4]

I figured as much. The part about how the IP addressing is sorted was puzzling me. What confused me more was seeing examples of VLAN setup where additional options were available that I could not find in my switch. That must have been layer 3 switches in the examples. My ISP router has no VLAN capabilities but I have access to a mikrotik router, I think I will dive into research on how to set it up to do what I intended to do. Thank you for your help! I learned something and that was the whole point.

[parnassus]

---

@IvoRoliC4 wrote: What confused me more was seeing examples of VLAN setup where additional options were available that I could not find in my switch. That must have been layer 3 switches in the examples.

---

Yes, very likely.