Help getting vlan working

n00b

I have a USG Flex500, firmware V5.37(ABUJ.0) in native mode and I am unable to get a basic VLAN to functioning correctly. I've read countless articles, and watched multiple Zyxel videos, but still can't seem make it work.

The USG500 is connected to a TP Link SG1024DE smart switch. I have tested the switch by putting multiple workstations on the switch with in the same vlan 70 and they can all ping each other. However, I can not seem to make a workstation, ping the firewall nor receive a dhcp address.

I am using P5 on the Zyxel, base IP range 10.0.0.x with VLAN70 of 10.10.70.x. I have swapped the switch from untagged and tagged, but no combination has worked yet. Below is my configuration and layout. Maybe someone can point out what routing I've overlooked.

Any hints would be appreciated.

TP-Link SG1024DE Settings:

PeterUK

If your devices are not tagged on NIC they can never see the USG.

Set ports on VLAN1 to not member 1-10

Your want USG connected to a port on the switch as tagged port 1 this port PVID does not need to be set to 70 (but is fine as 70) you then need to set ports 2-10 as untagged with the PVID as 70 devices on port 2-10 will then go out port 1 as tagged 70 to USG

PeterUK

If your devices are not tagged on NIC they can never see the USG.

Set ports on VLAN1 to not member 1-10

Your want USG connected to a port on the switch as tagged port 1 this port PVID does not need to be set to 70 (but is fine as 70) you then need to set ports 2-10 as untagged with the PVID as 70 devices on port 2-10 will then go out port 1 as tagged 70 to USG

Zyxel_Cooldia

Hi @n00b ,

Assume switch port 1 is a uplink port to flex. port 1-24 should assign to vlan 70

port 2-24 set to untag, and set pvid 70 on port 2-24

n00b

Thank you for the assistance. I believe I was overthinking it.

Here is the configuration that work in my TP-Link switch :)