Apr 05

Network Configuration:

This setup consists of separating two networks by the creating two VLANS on the DSR Series Service Router. This example will use the following setup:

Network 1 – /24 – Default

Network 2 – /24 – VLAN20

Step 1 – Enter the web GUI interface of the DSR using its IP address in a web browser. In our example we have used the IP address of


Accept any certificate warnings you may see, this is perfectly normal and safe

Step 2 – You should then be presented with the login page


Username: admin

Password: admin

Click “Login”

Step 3 – Click on the following options to setup VLANS

Network > VLAN > VLAN Settings


Step 4 – Here you must firstly enable VLAN then click “Save”


Step 5 – Once saved, click “Add New VLAN”


Name: VLAN20
Capital Portal: Off
Activate InterVLAN Routing: Off
(InterVLAN Routing can stay “Off” this way there is no way that both networks will see each other
Multi VLAN Subnet:
Subnet Mask:

Step 5 – Click on the option “DHCP Server”


Domain Name:

Starting IP Address:

Ending IP Address:

Default Gateway:

Primary DNS Server:

Secondary DNS Server:

Lease Time: 24

LAN Proxy: On (Default)

If you have a DHCP available for this new subnet, then click “DHCP Relay” and configure according to this network requirements. Once done, click “Save”

Within our example, we have used VLANID 20 for network After clicking on “Save” our second VLAN will have been created


Step 6 – The next step is to associate the VLAN with a port or certain ports. We will associate with Port 4


Network > VLAN > Port VLAN


Step 7
– In our example we are going to associate VLAN20 to Port 4. To do this, place the mouse over Port 4 and Right-Click then click on “Edit”


Step 8 – Once clicked on “Edit”, we will need to select “Mode” as “Access” with a PVID 20 (Step 5)


Once done, click on “Save”


NOTE: If you intend to connect a non-manageable switch to port 4 which doesn’t support VLANS then the mode “Access” is correct.

However, if you are planning to connect a manageable switch that does understand VLANS then you will need to select “Trunk” and VLAN Membership 20


Tags: ,

Dec 17


VLAN 1 can communicate with VLAN 2 but VLAN2 cannot access VLAN 1. Both VLANS can access the internet.

Lan Interface:

Default VLAN— VID-1—Ports 1-8
Vlan1    VLAN— VID 2—Ports 9-24
Port 1 will be tagged and connected to the DFL-210/800/1600.

Setup of D-Link DGS-3024

Step 1:From command line interface of DGS-3024:
DGS-3024# create vlan Vlan1 tag 2
DGS-3024# config vlan default delete 9-24
DGS-3024# config vlan Vlan1 add untagged 9-24
DGS-3024# config vlan default add tagged 1
DGS-3024# config vlan Vlan1 add tagged 1
DGS-3024# save



Setup of DFL-210

Step 1: Click on Objects and Interface Address. Add New IP address for the following:


Step 2: Click on Interfaces and VLAN. Add New VLAN.
Name: VLAN1
Interface: lan

IP Address: VLAN1
Network: VLAN1_Net
Default Gateway: None

Click OK.

Step 3: Click on Interfaces and VLAN. Add New VLAN.
Name: VLAN2
Interface: lan
IP Address: VLAN2
Network: VLAN2_Net
Default Gateway: None

Click OK.

Step 4: Click on Objects and Interface Address. Add New IP4 group.
Name: All_Internal_Nets
Select: lannet, VLAN1_net, VLAN2_net

Click OK.

Step 5: Click on Interfaces and select Interface Groups. Add New Interface Group.
Name: All_Internal_Interfaces
Select: lan, Vlan1, Vlan2

Click OK.

Step 6: Click on Rules, IP Rules, Lan to WAN. Edit The following 4 Rules:

Note: Each of the rules will need to be edited and have the new interface/nets applied.

Step 6: Click on Rules, IP Rules. Add New IP Folder (Optional).
Name: Vlan_Rules

Click OK.

Step 7: Add new IP Rule.
Name: Allow_VLAN1_to_VLAN2
Action: Allow
Service: All Services
Schedule: None
Source Interface: VLAN1
Source Network: VLAN1_Net
Destination Interface: VLAN2
Destination Network: VLAN2_Net

Step 7: Click Configuration Tab and click Save and Activate.

Tags: , ,

Nov 23

This FAQ will cover how to setup Port Based VLANS on Web Smart switches. This configuration guide will setup your switch with two VLANs.

Note: You can setup more than two VLANs. Please follow this guide and repeat from Step 3 for each new VLAN.

For this FAQ we will use a D-Link DGS-1248T, but this FAQ can be used to configure any Web Smart switch.

The examples given are using the following Test Lab setup:
1x DI-624: IP address
1x DGS-1248T: IP address
1x Windows XP PC (PC1): IP address
1x Windows XP PC (PC2): IP address
(Browser used for both PCs: Internet Explorer 6.0.x)

PC 1 will be plugged into port number 1 of the DGS-1248T.
PC 2 will be plugged into port number 10 of the DGS-1248T.
DI-624 (Ethernet port number 4) will be plugged into port number 48 of the DGS-1248T.

We will be using the default VLAN and one additional VLAN, (VLAN ID 2).

NOTE: The Internet connection MUST be a port that is a member of the default VLAN. Please do not change the PVID of the Internet connection.

Step 1 Log into the DGS-1248T from PC 1. Click on the VLAN link located on the left hand side.


Step 2 Click on the Add New VID button.


Step 3 Type in the new VID number. This must be a number between 2-4094.
For this FAQ we will use the number 2. Check mark the ports you want in your new VLAN, including your Internet connection and click Apply. For this FAQ we will check mark port number 10 (PC2) and port number 48 (Internet Connection). Click Apply, this will bring you back to the main VLAN page.


Step 4 From the main VLAN configuration page use the top drop down menu and select the Port VID settingoption.

Step 5 Here you can change the PVID numbers for your physical ports.
For this FAQ we will change the PVID of port 10 to have a PVID of 2, since “2” is the PVID number we gave to the new VLAN. This will prevent the two VLANs from passing traffic but still allow for Internet Connection.


PLEASE NOTE: Do not change the PVID number for the Internet connection. Leave the Internet Connection on the Default PVID.

Step 6 As you can see from our picture, we can no longer ping PC 2 from PC 1 but we can ping www.google.com.


We can also no longer ping PC 1 from PC 2 but we can ping www.google.com.


Tags: , ,