Do GS2220 series manage static routing?

Feco

I'd like to set up intervlan routings on my home network. GS2220 series labeled as "L2+" switch but I'm not capable to recognise this feature on the long feature list published on:

https://www.zyxel.com/hu/hu/products/switch/10-28-50-port-gbe-l2-managed-switch-gs2220-series/features.

Browsing through several articles L2+ usually contains this feature. What about GS2220?

Thank you!

Zyxel_Judy

Hi @Feco ,

The GS2220 series is an L2 switch and does not support L3 routing features.

The GS2220 switch just has the Static Routing feature that allows for IP static routing by Layer-2 switches. This ensures the switch can respond to management stations not reachable via the default gateway and proactively send traffic, such as SNMP traps or during IP connectivity tests using ping. This feature on the GS2220 switch is different from Layer-3 switches, which use static routes to forward traffic via gateways other than the default gateway.

To enable communication between your VLANs, you'll need to set up routing on an L3 switch or configure a security policy rule on your router within your network.

You can explore our L3 switch options here:  https://www.zyxel.com/global/en/products/switch , or check out our firewall offerings here:

  https://www.zyxel.com/global/en/products/next-gen-firewall  

.

PeterUK

Some switches I know support static routing as L2+ but I have never been sure with Zyxel about this I know I have a L2 GS2210 switch that does not support what your looking for.

Setup would be like
192.168.1.2 > 1.1.1.1 gateway 192.168.1.254 to switch gateway on switch to 192.168.1.1 to forward 1.1.1.1 to USG

Zyxel_Judy

Hi @Feco ,

The GS2220 series is an L2 switch and does not support L3 routing features.

The GS2220 switch just has the Static Routing feature that allows for IP static routing by Layer-2 switches. This ensures the switch can respond to management stations not reachable via the default gateway and proactively send traffic, such as SNMP traps or during IP connectivity tests using ping. This feature on the GS2220 switch is different from Layer-3 switches, which use static routes to forward traffic via gateways other than the default gateway.

To enable communication between your VLANs, you'll need to set up routing on an L3 switch or configure a security policy rule on your router within your network.

You can explore our L3 switch options here:  https://www.zyxel.com/global/en/products/switch , or check out our firewall offerings here:

  https://www.zyxel.com/global/en/products/next-gen-firewall  

.

PeterUK

Some switches I know support static routing as L2+ but I have never been sure with Zyxel about this I know I have a L2 GS2210 switch that does not support what your looking for.

Setup would be like
192.168.1.2 > 1.1.1.1 gateway 192.168.1.254 to switch gateway on switch to 192.168.1.1 to forward 1.1.1.1 to USG

Painted_Turtle

Thanks! But I think that I'm still confused.

As I understand the answer, it would seem to suggest that configuration at Menu --> NETWORKING-->Static Routing-->IPv4 Static Route only effects management traffic (Web Management, SNMP,  Syslog, etc.) to/from the switch and NOT traffic originating and terminating outside of the switch.

If this configuration only applies to management traffic, than it is in a confusing location. To make things more clear, Instead of under NETWORKING, it should be somewhere else, such as under SYSTEM. And section 59  “Static Route” on page 395, of the GS2220 Series User’s Guide, v4.80 should instead be titled something “Management Static Routes.” And section 59 should mention that this only applies to management type traffic going to/from the switch itself.

HOWEVER, the GS2220 Handbook, edition 2023.1 has a section, on page 43 titled, “2.2 How to configure the switch to route traffic across VLANs“.

It seems that a critical piece is going to Menu --> SYSTEM --> IP Setup --> IP Setup --> IP Interface --> Add/Edit and configuring a management interface on the VLANs that you wish to route between.

What I do not like about this, is that it looks like the switch can now be managed from all of these extra interfaces. From a security standpoint, I'd rather not have that situation.

Unless there is a solution somewhere else, what we need is a checkbox, to enable/disable switch management for each of these added interfaces.

PeterUK

in SECURITY > Access Control > Remote Management > Remote Management IPv4

I think here you can limit by IP range to the switch

Unless told unwise L2+ from Zyxel is not the same as other switches so only Lite-L3 or L3 is what your looking for.