Apr 05

Network Configuration:

This setup consists of separating two networks by the creating two VLANS on the DSR Series Service Router. This example will use the following setup:

Network 1 – 192.168.10.0 /24 – Default

Network 2 – 192.168.20.0 /24 – VLAN20

Step 1 – Enter the web GUI interface of the DSR using its IP address in a web browser. In our example we have used the IP address of 192.168.10.1

DSR_Series_FW2_How_to_setup_Two_VLANS1

Accept any certificate warnings you may see, this is perfectly normal and safe

Step 2 – You should then be presented with the login page

DSR_Series_FW2_How_to_setup_Two_VLANS2

Username: admin

Password: admin

Click “Login”

Step 3 – Click on the following options to setup VLANS

Network > VLAN > VLAN Settings

DSR_Series_FW2_How_to_setup_Two_VLANS3

Step 4 – Here you must firstly enable VLAN then click “Save”

DSR_Series_FW2_How_to_setup_Two_VLANS4

Step 5 – Once saved, click “Add New VLAN”

DSR_Series_FW2_How_to_setup_Two_VLANS5

VLAN IP: 20
Name: VLAN20
Capital Portal: Off
Activate InterVLAN Routing: Off
(InterVLAN Routing can stay “Off” this way there is no way that both networks will see each other
Multi VLAN Subnet: 192.168.20.1
Subnet Mask: 255.255.255.0

Step 5 – Click on the option “DHCP Server”

DSR_Series_FW2_How_to_setup_Two_VLANS6

Domain Name:
DHCP_VLAN20

Starting IP Address: 192.168.20.2

Ending IP Address: 192.168.20.254

Default Gateway: 192.168.20.1

Primary DNS Server: 8.8.8.8

Secondary DNS Server: 8.8.4.4.

Lease Time: 24

LAN Proxy: On (Default)

If you have a DHCP available for this new subnet, then click “DHCP Relay” and configure according to this network requirements. Once done, click “Save”

Within our example, we have used VLANID 20 for network 192.168.20.0/24. After clicking on “Save” our second VLAN will have been created

DSR_Series_FW2_How_to_setup_Two_VLANS7

Step 6 – The next step is to associate the VLAN with a port or certain ports. We will associate with Port 4

DSR_Series_FW2_How_to_setup_Two_VLANS8

Network > VLAN > Port VLAN

DSR_Series_FW2_How_to_setup_Two_VLANS9

Step 7
– In our example we are going to associate VLAN20 to Port 4. To do this, place the mouse over Port 4 and Right-Click then click on “Edit”

DSR_Series_FW2_How_to_setup_Two_VLANS10

Step 8 – Once clicked on “Edit”, we will need to select “Mode” as “Access” with a PVID 20 (Step 5)

DSR_Series_FW2_How_to_setup_Two_VLANS11

Once done, click on “Save”

DSR_Series_FW2_How_to_setup_Two_VLANS12

NOTE: If you intend to connect a non-manageable switch to port 4 which doesn’t support VLANS then the mode “Access” is correct.

However, if you are planning to connect a manageable switch that does understand VLANS then you will need to select “Trunk” and VLAN Membership 20

DSR_Series_FW2_How_to_setup_Two_VLANS13

Tags: ,

Dec 17

Scenario:

VLAN 1 can communicate with VLAN 2 but VLAN2 cannot access VLAN 1. Both VLANS can access the internet.

DFL-210/800/1600:
Lan Interface: 192.168.1.1
VLAN1: 192.168.2.1
VLAN2: 192.168.3.1

DGS-3024:
Default VLAN— VID-1—Ports 1-8
Vlan1    VLAN— VID 2—Ports 9-24
Port 1 will be tagged and connected to the DFL-210/800/1600.

Setup of D-Link DGS-3024

Step 1:From command line interface of DGS-3024:
DGS-3024# create vlan Vlan1 tag 2
DGS-3024# config vlan default delete 9-24
DGS-3024# config vlan Vlan1 add untagged 9-24
DGS-3024# config vlan default add tagged 1
DGS-3024# config vlan Vlan1 add tagged 1
DGS-3024# save

A10534_image1

A10534_image2

Setup of DFL-210

Step 1: Click on Objects and Interface Address. Add New IP address for the following:

VLAN1: 192.168.2.1
VLAN2: 192.168.3.1
VLAN1_net: 192.168.2.0/24
VLAN2_net: 192.168.3.0/24

Step 2: Click on Interfaces and VLAN. Add New VLAN.
Name: VLAN1
Interface: lan
VLAN ID: 1

IP Address: VLAN1
Network: VLAN1_Net
Default Gateway: None

Click OK.

Step 3: Click on Interfaces and VLAN. Add New VLAN.
Name: VLAN2
Interface: lan
VLAN ID: 2
IP Address: VLAN2
Network: VLAN2_Net
Default Gateway: None

Click OK.

Step 4: Click on Objects and Interface Address. Add New IP4 group.
Name: All_Internal_Nets
Select: lannet, VLAN1_net, VLAN2_net

Click OK.

Step 5: Click on Interfaces and select Interface Groups. Add New Interface Group.
Name: All_Internal_Interfaces
Select: lan, Vlan1, Vlan2

Click OK.

Step 6: Click on Rules, IP Rules, Lan to WAN. Edit The following 4 Rules:
drop_smb-all
Allow_ping-outbound
Allow_ftp-passthrough
Allow_standard

Note: Each of the rules will need to be edited and have the new interface/nets applied.

Step 6: Click on Rules, IP Rules. Add New IP Folder (Optional).
Name: Vlan_Rules

Click OK.

Step 7: Add new IP Rule.
Name: Allow_VLAN1_to_VLAN2
Action: Allow
Service: All Services
Schedule: None
Source Interface: VLAN1
Source Network: VLAN1_Net
Destination Interface: VLAN2
Destination Network: VLAN2_Net

Step 7: Click Configuration Tab and click Save and Activate.

Tags: , ,

Nov 23

This FAQ will cover how to setup Port Based VLANS on Web Smart switches. This configuration guide will setup your switch with two VLANs.

Note: You can setup more than two VLANs. Please follow this guide and repeat from Step 3 for each new VLAN.

For this FAQ we will use a D-Link DGS-1248T, but this FAQ can be used to configure any Web Smart switch.

The examples given are using the following Test Lab setup:
1x DI-624: IP address 192.168.20.1
1x DGS-1248T: IP address 192.168.20.154
1x Windows XP PC (PC1): IP address 192.168.20.220
1x Windows XP PC (PC2): IP address 192.168.20.221
(Browser used for both PCs: Internet Explorer 6.0.x)

PC 1 will be plugged into port number 1 of the DGS-1248T.
PC 2 will be plugged into port number 10 of the DGS-1248T.
DI-624 (Ethernet port number 4) will be plugged into port number 48 of the DGS-1248T.

We will be using the default VLAN and one additional VLAN, (VLAN ID 2).

NOTE: The Internet connection MUST be a port that is a member of the default VLAN. Please do not change the PVID of the Internet connection.

Step 1 Log into the DGS-1248T from PC 1. Click on the VLAN link located on the left hand side.

A10473_image1

Step 2 Click on the Add New VID button.

A10473_image2

Step 3 Type in the new VID number. This must be a number between 2-4094.
For this FAQ we will use the number 2. Check mark the ports you want in your new VLAN, including your Internet connection and click Apply. For this FAQ we will check mark port number 10 (PC2) and port number 48 (Internet Connection). Click Apply, this will bring you back to the main VLAN page.

A10473_image3

Step 4 From the main VLAN configuration page use the top drop down menu and select the Port VID settingoption.

Step 5 Here you can change the PVID numbers for your physical ports.
For this FAQ we will change the PVID of port 10 to have a PVID of 2, since “2” is the PVID number we gave to the new VLAN. This will prevent the two VLANs from passing traffic but still allow for Internet Connection.

A10473_image4

PLEASE NOTE: Do not change the PVID number for the Internet connection. Leave the Internet Connection on the Default PVID.

Step 6 As you can see from our picture, we can no longer ping PC 2 from PC 1 but we can ping www.google.com.

A10473_image5

We can also no longer ping PC 1 from PC 2 but we can ping www.google.com.

A10473_image6

Tags: , ,

css.php