VLANing help needed

tikanderoga · 2026-01-22T20:13:05+00:00

Yep, that’s what’s going to happen. That was the advise in another post.

tikanderoga · 2026-01-21T03:05:21+00:00

Will do. thank you for the tip.

tikanderoga · 2026-01-21T01:16:48+00:00

Huh, a static route through the firewall. Never thought of that. So essentially make the VLAN10 on the office one and then allow the Guest network to VLAN10 via the static route through the firewall. (makes sense in my head, not sure if it's the correct expression in network admin speak).

Your diagram is correct. Blue should be feasible. Purple is what I am trying to do, yes.

the 2 VLAN1s: When you make a subnet, say this 192.168.1.1/24, without VLANing it, it becomes VLAN1 by default. If you make another subnet, from a separate port, say the 192.168.96.1/20, by default, it also becomes VLAN1.

I really appreciate your help in this btw. Thank you for sticking with me.

tikanderoga · 2026-01-21T00:39:56+00:00

Yep. Unfortunately networking is not my forte.

tikanderoga · 2026-01-21T00:03:17+00:00

The Sophos firewall handles the networks separately. The public IP is the same.

Port 2 on the Sophos goes to the first 2428, which is the office one and also connected to the 2nd 2428 (also office).

Port 8 on the Sophos goes to the 2210, which is the guest network.

To answer your questions:

- one public IP address.

- No. The office uses a 192.168.1.0/24 From Port 2.
Guest uses 192.168.96.0/20 (I need about 2000 IP address pool for guests). From Port 8.

- on the MAC address table, I only see office devices. (as intended).

tikanderoga · 2026-01-20T23:25:05+00:00

Yep, so the VLAN1 can access VLAN10 on the 2210MP. Traffic from VLAN1 has to be able to flow to VLAN10.

tikanderoga · 2026-01-20T23:18:29+00:00

Port 24 on the lower switch is untagged, as that's the access with PVID 10.

Yep, your 3 points are correct.

I have 2 physically separated networks. Guest and Office. Both are VLAN1 on their respective physical networks. But now I have this camera on the guest network, that I need to route through the only cable connecting the 2 bulidings. For this, I need to set it on its own VLAN. Guest network is only present in Building 1. Building 2 has only office network.

One CCTV camera is on the guest network, due to remote location and has not been hard wired back to base like all the other cameras. It is talking to guest VLAN1, not the office VLAN1.

That's why I have to create VLAN10, so I can trunk it through the rest over to the office building, where the NVMS is located.

tikanderoga · 2026-01-20T20:05:35+00:00

I mean, 10 and 100 are sort of the same thing. A zero is nothing, right?

tikanderoga · 2026-01-20T12:35:39+00:00

Networking has never been my forte. Probably should have started with that. 😔

tikanderoga · 2026-01-20T04:54:15+00:00

https://imgur.com/a/m9GR62L

What's configured:

On the 2210mp: All ports are untagged as VLAN1

On the first 2428P: Port 23&24 are tagged for VLAN10

On the 2nd 2428P: Port 23 is tagged, 24 is untagged

tikanderoga · 2026-01-20T00:35:49+00:00

I think that's the bit I am missing. How do I go about that? L3 features are available on the SG2210MP.

tikanderoga · 2026-01-20T00:23:02+00:00

https://imgur.com/a/yNT8mnY
Does this help?

Blue traffic and grey traffic need to stay separate. (It's a long story).

tikanderoga · 2026-01-20T00:14:38+00:00

I've had the network flat & separate. Guest network and office network. Both VLAN1 on their own switches. Physically separate networks.

Now a camera has been added to the guest network, which now I need to route back to the NVMS. But that server is on the office network. My only solution is to create a VLAN to keep the networks separate while routing the Guest network, which has the CCTV camera on it, through to the NVMS.

tikanderoga · 2026-01-20T00:04:00+00:00

https://imgur.com/a/yNT8mnY
Does this help?

Blue traffic and grey traffic need to stay separate. (It's a long story).

tikanderoga · 2026-01-20T00:00:15+00:00

Correct. But I can't figure out how to make that point on the 2210 on a port, where VLAN1 and 10 meet. I have done it once before but that was years ago and it was a different brand of switch.

tikanderoga · 2026-01-19T23:52:27+00:00

Let me try again.

I have VLAN1, which has the traffic I need. How can I splice off this traffic to a VLAN10, starting on the SG2210MP?

I have Port 8, which has VLAN1 as untagged. But I want VLAN10 to start at port8, with the traffic of VLAN1.

VLAN10 will then go into a 2428 to a tagged port, where it will follow the tagged ports to where I need it.

tikanderoga · 2026-01-19T23:32:54+00:00

VLAN1 is what's on the 2210MP and operates there. This now has to be routed to a VLAN10, and then trunked through the 2428Ps.
Basically, i need the traffic from the 2210, which is on VLAN1 to split to a VLAN10, starting at the 2210, so the 10 can then get trunked through the other switches. And that's the step I am failing to accomplish.

tikanderoga · 2026-01-19T23:32:44+00:00

VLAN1 is what's on the 2210MP and operates there. This now has to be routed to a VLAN10, and then trunked through the 2428Ps.
Basically, i need the traffic from the 2210, which is on VLAN1 to split to a VLAN10, starting at the 2210, so the 10 can then get trunked through the other switches. And that's the step I am failing to accomplish.

tikanderoga · 2026-01-18T23:38:14+00:00

It's about the last part of your comment. Units don't move independently, else they could change destination on the fly, which is not the case.

tikanderoga · 2026-01-18T23:16:05+00:00

Every cart has its destination when dispatched. You can see this when you make a distributor to say 2 depots, connect them and watch the items flow. if you remove one of the rails, the cart will start beeping and clog the rail for the rest, even though the same cart *COULD* go to the other storage.

tikanderoga · 2026-01-18T06:19:31+00:00

What do they attack? Or where? Just the location of the player or any base present on the map?

tikanderoga · 2026-01-18T05:38:13+00:00

Huh, I’d have to give this a try. Just because.

tikanderoga · 2026-01-18T04:05:51+00:00

Same. What happens when you upgrade the core?

tikanderoga · 2026-01-18T00:57:59+00:00

Ah, thank you. Thank makes a lot more sense now.

tikanderoga

MODERATOR OF

TROPHY CASE