Setup switch spanning VLAN with XGS1930 series

Hello,

I would like to use a fibre connection between two XGS1930 switches to transport two logical networks separated by VLAN:

Or described in other words:
All data on port 24 of the left switch (1) belong to VLAN2 (switch should tag them accordingly). 
All other ports (except SFP+ port 28) belong to VLAN1 (default network). 

The fibre connection between switch 1 port 28 and switch 2 port 52 should transport frames of both VLANs. 

Switch 2 routes packets of VLAN2 to ports 19-20, all other packets (VLAN1) to the other ports.

So far I have only configured port based VLAN on one switch only using the setup wizard...
Can anyone give me a hint how to configure the scenario described above? What VLAN type and VLAN registration is necessary? Do I need to enable VLAN Trunking? Ingress check?

Thank you very much in advance for your help!

Florian

Accepted Solution

  • fquadt
    fquadt Posts: 5
    Friend Collector First Comment
    Answer ✓
    Hi @Zyxel_Melen,

    last weekend I tried the suggested setup. Configuring switch 1 went well but during the configuration of switch 2 I was suddenly locked out (no access to switch 2 anymore) and had to restart the switch(es) to reload the previous settings.

    It worked after I had changed the settings to the following (changed settings are in bold):

    Just for reference the diagram first (unchanged):

    Switch/PortVLAN1 Control &
    Tagging
    VLAN2 Control & TaggingPVID
    Switch 1 - Port 24 (Router2)Normal
    untagged
    Fixed
    untagged
    PVID 2
    Switch 1 - Port 28 (Connection to Switch2)Fixed
    untagged
    Fixed
    tagged
    PVID 1
    Switch 1 - all other portsFixed
    untagged
    Normal
    tagged
    PVID 1
    Switch 2 - Port 19, 20 (VLAN2 devices)Normal
    untagged
    Fixed
    untagged
    PVID 2
    Switch 2 - Port 52 (Connection to Switch1)Fixed
    untagged
    Fixed
    tagged
    PVID 1
    Switch 2 - all other portsFixed
    untagged
    Normal
    tagged
    PVID 1

    I hope this finally makes sense. I got on the right track after I googled "Zyxel TX Tagging" and found an official VLAN-Tutorial.  

    Best regards
    Florian

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 1,591  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Hi @fquadt,

    Welcome to the Zyxel community!
    Does the router2 a VLAN-aware device?

    If yes, you can
    1. Add your LAN interface with a specific VLAN tag (VLAN 2) for your network2.
    2. Switch 1 ports 24 & 28 fix to VLAN 2. Both ports should be tagged.
    3. Switch 2 ports 19 & 20 & 52 fix to VLAN 2. Port 19 & 20 should be untagged and port 52 should be tagged.
    4. Set PVID 2 to switch 2 ports 19 & 20.

    If not, you can
    1. Fix switch 1 port 24 to VLAN 2 and forbid VLAN 1. Port 24 should be untagged here.
    2. Also, set the PVID 2 to switch 1 port 24.
    3. Switch 2 ports 19 & 20 & 52 fix to VLAN 2. Port 19 & 20 should be untagged and port 52 should be tagged.
    4. Set PVID 2 to switch 2 ports 19 & 20.

    Zyxel Melen

  • fquadt
    fquadt Posts: 5
    Friend Collector First Comment
    edited November 2022
    Hello Melen,

    thank you very much for your detailed instructions!
    The router2 is not VLAN-aware. I tried to follow your instructions accordingly.
    To make sure I made the correct settings, allow me to insert some screenshots after every step you described. Am I right that all settings have to be made in the "Static VLAN Setup"?

    1. Fix switch 1 port 24 to VLAN 2 and forbid VLAN 1. Port 24 should be untagged here.

    Question to picture above: Should I set all other ports to "Normal" or to "Fobidden"?
    Any special treatment for port 28 (shared connection)?


    Question to picture above: Should I set all other ports to "Normal" or to "Fixed"?
    Any special treatment for port 28 (shared connection)?


    2. Also, set the PVID 2 to switch 1 port 24.
    On what configuration page can I set the PVID and assign it to port 24?


    3. Switch 2 ports 19 & 20 & 52 fix to VLAN 2. Port 19 & 20 should be untagged and port 52 should be tagged.


    All other ports to "Normal"?


    4. Set PVID 2 to switch 2 ports 19 & 20.
    Where can I set the "PVID 2" and assign it?

    I hope after you answered the open questions I will be able to make this setup work without any more questions.

    Thank you again for your help!

    Florian 


  • Zyxel_Melen
    Zyxel_Melen Posts: 1,591  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    edited November 2022
    Hi @fquadt,

    1. Switch 1 port 28 also need to fix VLAN 2. The other ports can be "Normal" or "Forbidden".
    The difference is that "Normal" means this port can dynamically join this VLAN by using GVRP.
    "Forbidden" is to prohibit this port to join this VLAN.
    And VLAN 1 you don't need to change other ports' settings.

    2. Please go to Advanced Application > VLAN > VLAN configuration > VLAN port setup to configure.

    3. Same as answer 1.

    4. Same as answer 2.

    Zyxel Melen

  • fquadt
    fquadt Posts: 5
    Friend Collector First Comment
    edited November 2022
    Hi Melen,

    thank you again for your answer. So I will summarize in the following table, what I have understood:

    Switch/PortVLAN1 Control &
    Tagging
    VLAN2 Control & TaggingPVID
    Switch 1 - Port 24 (Router2)Forbidden
    untagged
    Fixed
    untagged
    PVID 2
    Switch 1 - Port 28 (Connection to Switch2)Normal
    tagged
    Fixed
    tagged
    PVID 1
    Switch 1 - all other portsFixed
    tagged
    Forbidden
    tagged
    PVID 1
    Switch 2 - Port 19, 20 (VLAN2 devices)Forbidden
    untagged
    Fixed
    untagged
    PVID 2
    Switch 2 - Port 52 (Connection to Switch1)Normal
    tagged
    Fixed
    tagged
    PVID 1
    Switch 2 - all other portsFixed
    tagged
    Forbidden
    tagged
    PVID 1

    Is this the correct setup? Could you please esp. check the settings for the ports 28+52, which connect both switches and have to transport frames of both VLANs? For this they must be allowed to be in VLAN1, aren't they? Normal or Fixed?

    The ports connected to the VLAN2 devices (router, NAS, etc.) should get PVID 2. I have found the configuration page but there are a lot more settings such as
    • Ingress Check, 
    • GVRP, 
    • VLAN Trunking and 
    • Isolation. 
    Do I have to enable certain settings here or do I only have to change the PVID?

    Again, I am very grateful for your support!

    Best regards
    Florian
  • Zyxel_Melen
    Zyxel_Melen Posts: 1,591  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Hi @fquadt,

    VLAN1 on ports 28+52 should be fixed so the VLAN 1 frame can be transferred between switch 1 & 2.
    And you don't need to enable ingress check, GVRP, VLAN trunking, and isolation. You just need to change the PVID here.

    Zyxel Melen

  • fquadt
    fquadt Posts: 5
    Friend Collector First Comment
    Answer ✓
    Hi @Zyxel_Melen,

    last weekend I tried the suggested setup. Configuring switch 1 went well but during the configuration of switch 2 I was suddenly locked out (no access to switch 2 anymore) and had to restart the switch(es) to reload the previous settings.

    It worked after I had changed the settings to the following (changed settings are in bold):

    Just for reference the diagram first (unchanged):

    Switch/PortVLAN1 Control &
    Tagging
    VLAN2 Control & TaggingPVID
    Switch 1 - Port 24 (Router2)Normal
    untagged
    Fixed
    untagged
    PVID 2
    Switch 1 - Port 28 (Connection to Switch2)Fixed
    untagged
    Fixed
    tagged
    PVID 1
    Switch 1 - all other portsFixed
    untagged
    Normal
    tagged
    PVID 1
    Switch 2 - Port 19, 20 (VLAN2 devices)Normal
    untagged
    Fixed
    untagged
    PVID 2
    Switch 2 - Port 52 (Connection to Switch1)Fixed
    untagged
    Fixed
    tagged
    PVID 1
    Switch 2 - all other portsFixed
    untagged
    Normal
    tagged
    PVID 1

    I hope this finally makes sense. I got on the right track after I googled "Zyxel TX Tagging" and found an official VLAN-Tutorial.  

    Best regards
    Florian
  • Hi @Zyxel_Melen,

    last weekend I tried the suggested setup. Configuring switch 1 went well but during the configuration of switch 2 I was suddenly locked out (no access to switch 2 enymore) and had to restart the switch(es) to reload the previous settings.

    It worked after I had changed the settings to the following (changed settings are in bold):

    Just for reference the diagram first (unchanged):

    Switch/PortVLAN1 Control &
    Tagging
    VLAN2 Control & TaggingPVID
    Switch 1 - Port 24 (Router2)Normal
    untagged
    Fixed
    untagged
    PVID 2
    Switch 1 - Port 28 (Connection to Switch2)Fixed
    untagged
    Fixed
    tagged
    PVID 1
    Switch 1 - all other portsFixed
    untagged
    Normal
    tagged
    PVID 1
    Switch 2 - Port 19, 20 (VLAN2 devices)Normal
    untagged
    Fixed
    untagged
    PVID 2
    Switch 2 - Port 52 (Connection to Switch1)Fixed
    untagged
    Fixed
    tagged
    PVID 1
    Switch 2 - all other portsFixed
    untagged
    Normal
    tagged
    PVID 1

    I hope this finally makes sense. I got on the right track after I googled "Zyxel TX Tagging" and found an official VLAN-Tutorial.  

    Best regards
    Florian