Setup switch spanning VLAN with XGS1930 series

fquadt

Hello,

I would like to use a fibre connection between two XGS1930 switches to transport two logical networks separated by VLAN:

Or described in other words:
All data on port 24 of the left switch (1) belong to VLAN2 (switch should tag them accordingly). 
All other ports (except SFP+ port 28) belong to VLAN1 (default network). 

The fibre connection between switch 1 port 28 and switch 2 port 52 should transport frames of both VLANs. 

Switch 2 routes packets of VLAN2 to ports 19-20, all other packets (VLAN1) to the other ports.

So far I have only configured port based VLAN on one switch only using the setup wizard...
Can anyone give me a hint how to configure the scenario described above? What VLAN type and VLAN registration is necessary? Do I need to enable VLAN Trunking? Ingress check?

Thank you very much in advance for your help!

Florian

fquadt

Hi @Zyxel_Melen,

last weekend I tried the suggested setup. Configuring switch 1 went well but during the configuration of switch 2 I was suddenly locked out (no access to switch 2 anymore) and had to restart the switch(es) to reload the previous settings.

It worked after I had changed the settings to the following (changed settings are in bold):

Just for reference the diagram first (unchanged):

Switch/Port	VLAN1 Control & Tagging	VLAN2 Control & Tagging	PVID
Switch 1 - Port 24 (Router2)	Normal untagged	Fixed untagged	PVID 2
Switch 1 - Port 28 (Connection to Switch2)	Fixed untagged	Fixed tagged	PVID 1
Switch 1 - all other ports	Fixed untagged	Normal tagged	PVID 1
Switch 2 - Port 19, 20 (VLAN2 devices)	Normal untagged	Fixed untagged	PVID 2
Switch 2 - Port 52 (Connection to Switch1)	Fixed untagged	Fixed tagged	PVID 1
Switch 2 - all other ports	Fixed untagged	Normal tagged	PVID 1

I hope this finally makes sense. I got on the right track after I googled "Zyxel TX Tagging" and found an official VLAN-Tutorial.  

Best regards
Florian

Zyxel_Melen

Hi @fquadt,

Welcome to the Zyxel community!
Does the router2 a VLAN-aware device?

If yes, you can
1. Add your LAN interface with a specific VLAN tag (VLAN 2) for your network2.
2. Switch 1 ports 24 & 28 fix to VLAN 2. Both ports should be tagged.
3. Switch 2 ports 19 & 20 & 52 fix to VLAN 2. Port 19 & 20 should be untagged and port 52 should be tagged.
4. Set PVID 2 to switch 2 ports 19 & 20.

If not, you can
1. Fix switch 1 port 24 to VLAN 2 and forbid VLAN 1. Port 24 should be untagged here.
2. Also, set the PVID 2 to switch 1 port 24.
3. Switch 2 ports 19 & 20 & 52 fix to VLAN 2. Port 19 & 20 should be untagged and port 52 should be tagged.
4. Set PVID 2 to switch 2 ports 19 & 20.

fquadt

Hello Melen,

thank you very much for your detailed instructions!
The router2 is not VLAN-aware. I tried to follow your instructions accordingly.
To make sure I made the correct settings, allow me to insert some screenshots after every step you described. Am I right that all settings have to be made in the "Static VLAN Setup"?

1. Fix switch 1 port 24 to VLAN 2 and forbid VLAN 1. Port 24 should be untagged here.

Question to picture above: Should I set all other ports to "Normal" or to "Fobidden"?
Any special treatment for port 28 (shared connection)?


Question to picture above: Should I set all other ports to "Normal" or to "Fixed"?
Any special treatment for port 28 (shared connection)?


2. Also, set the PVID 2 to switch 1 port 24.
On what configuration page can I set the PVID and assign it to port 24?


3. Switch 2 ports 19 & 20 & 52 fix to VLAN 2. Port 19 & 20 should be untagged and port 52 should be tagged.


All other ports to "Normal"?


4. Set PVID 2 to switch 2 ports 19 & 20.
Where can I set the "PVID 2" and assign it?

I hope after you answered the open questions I will be able to make this setup work without any more questions.

Thank you again for your help!

Florian 

Zyxel_Melen

Hi @fquadt,

1. Switch 1 port 28 also need to fix VLAN 2. The other ports can be "Normal" or "Forbidden".
The difference is that "Normal" means this port can dynamically join this VLAN by using GVRP.
"Forbidden" is to prohibit this port to join this VLAN.
And VLAN 1 you don't need to change other ports' settings.

2. Please go to Advanced Application > VLAN > VLAN configuration > VLAN port setup to configure.

3. Same as answer 1.

4. Same as answer 2.

fquadt

Hi Melen,

thank you again for your answer. So I will summarize in the following table, what I have understood:

Switch/Port	VLAN1 Control & Tagging	VLAN2 Control & Tagging	PVID
Switch 1 - Port 24 (Router2)	Forbidden untagged	Fixed untagged	PVID 2
Switch 1 - Port 28 (Connection to Switch2)	Normal tagged	Fixed tagged	PVID 1
Switch 1 - all other ports	Fixed tagged	Forbidden tagged	PVID 1
Switch 2 - Port 19, 20 (VLAN2 devices)	Forbidden untagged	Fixed untagged	PVID 2
Switch 2 - Port 52 (Connection to Switch1)	Normal tagged	Fixed tagged	PVID 1
Switch 2 - all other ports	Fixed tagged	Forbidden tagged	PVID 1

Is this the correct setup? Could you please esp. check the settings for the ports 28+52, which connect both switches and have to transport frames of both VLANs? For this they must be allowed to be in VLAN1, aren't they? Normal or Fixed?

The ports connected to the VLAN2 devices (router, NAS, etc.) should get PVID 2. I have found the configuration page but there are a lot more settings such as

• Ingress Check, 
• GVRP, 
• VLAN Trunking and 
• Isolation. 

Do I have to enable certain settings here or do I only have to change the PVID?

Again, I am very grateful for your support!

Best regards
Florian

Zyxel_Melen

Hi @fquadt,

VLAN1 on ports 28+52 should be fixed so the VLAN 1 frame can be transferred between switch 1 & 2.
And you don't need to enable ingress check, GVRP, VLAN trunking, and isolation. You just need to change the PVID here.

fquadt

Hi @Zyxel_Melen,

last weekend I tried the suggested setup. Configuring switch 1 went well but during the configuration of switch 2 I was suddenly locked out (no access to switch 2 anymore) and had to restart the switch(es) to reload the previous settings.

It worked after I had changed the settings to the following (changed settings are in bold):

Just for reference the diagram first (unchanged):

Switch/Port	VLAN1 Control & Tagging	VLAN2 Control & Tagging	PVID
Switch 1 - Port 24 (Router2)	Normal untagged	Fixed untagged	PVID 2
Switch 1 - Port 28 (Connection to Switch2)	Fixed untagged	Fixed tagged	PVID 1
Switch 1 - all other ports	Fixed untagged	Normal tagged	PVID 1
Switch 2 - Port 19, 20 (VLAN2 devices)	Normal untagged	Fixed untagged	PVID 2
Switch 2 - Port 52 (Connection to Switch1)	Fixed untagged	Fixed tagged	PVID 1
Switch 2 - all other ports	Fixed untagged	Normal tagged	PVID 1

I hope this finally makes sense. I got on the right track after I googled "Zyxel TX Tagging" and found an official VLAN-Tutorial.  

Best regards
Florian

fquadt

Hi @Zyxel_Melen,

last weekend I tried the suggested setup. Configuring switch 1 went well but during the configuration of switch 2 I was suddenly locked out (no access to switch 2 enymore) and had to restart the switch(es) to reload the previous settings.

It worked after I had changed the settings to the following (changed settings are in bold):

Just for reference the diagram first (unchanged):

Switch/Port	VLAN1 Control & Tagging	VLAN2 Control & Tagging	PVID
Switch 1 - Port 24 (Router2)	Normal untagged	Fixed untagged	PVID 2
Switch 1 - Port 28 (Connection to Switch2)	Fixed untagged	Fixed tagged	PVID 1
Switch 1 - all other ports	Fixed untagged	Normal tagged	PVID 1
Switch 2 - Port 19, 20 (VLAN2 devices)	Normal untagged	Fixed untagged	PVID 2
Switch 2 - Port 52 (Connection to Switch1)	Fixed untagged	Fixed tagged	PVID 1
Switch 2 - all other ports	Fixed untagged	Normal tagged	PVID 1

I hope this finally makes sense. I got on the right track after I googled "Zyxel TX Tagging" and found an official VLAN-Tutorial.  

Best regards
Florian