Forwarding one VLAN to another

ROM
ROM Posts: 3  Freshman Member
First Comment Friend Collector
edited August 2022 in Switch

I need to connect my internal network to factory network.

Factory network should connect to all computers and other devices in my internal network. My network shouldn't see devices of factory network.

For this I use commutator GS1920-8HPV2 (Firmware: 4.50 ABZ.0 05.07.2018)

I created 2 VLANs:

VLAN 10 - for factory network connectrion (port: 2,3),

VLAN 100 - for internal network (port 4,5,6,7,8)

I added 2 IPs: 10.10.136.47 for VLAN 10 and 192.168.0.1 for VLAN 100

The problem I have: I can't forward requests from VLAN 10 to VLAN 1000.

I tried to do this with Classifier and Policy Rule: I entered Layer 3 SrcIP=10.10.136.1/24 (VLAN 10) and DestIp=192.168.0.1 (VLAN 100) in Classifier and created Policy Rool for this. I tried first policy rool with VLAN ID=10 and egress port 3 (for VLAN 10), and I tried another one with VLAN ID = 100 and egress port =4.

I checked connection with ping from one computer, connected to port 3 of GS1920-8HP (on factory side, VLAN 10) to another connected to port 4 of GS1920-8HP (on internal network side, VLAN 100) - but pings didn't go.

Please help me with advise, how can I connect my internal network to factory network with GS1920-HP?

0-VLAN-Image.png
01-vlans-configuration.png
02-external-netvork-vlan-10.png
03-internal-network-vlan-100.png
04-internal-and-external-vlans-port-setup.png
05-internal-vlan-subnettw.png
06-internal_and-external-ip-setup.png
17-Classifier-Layer3-Configuration-Datail.png
18-Classifier-PolicyRule-try1-VLAN100.png
19-Classifier-PolicyRule-try2-VLAN10.png


All Replies

  • Zyxel_Derrick
    Zyxel_Derrick Posts: 126  Zyxel Employee
    5 Answers First Comment Friend Collector First Anniversary

    Hi Rom


    VLAN 10 and VLAN 100 are in the different sub nets

    If you want them to communicate with each other, you may need a layer 3 device to do the routing instead of using ACL

    Thanks


    Zyxel_Derrick

  • Sakura_T
    Sakura_T Posts: 101  Ally Member
    5 Answers First Comment Friend Collector Second Anniversary

    GS1920 series is merely a L2 switch which cannot do route between VLANs I think...

  • TomorrowOcean
    TomorrowOcean Posts: 59  Ally Member
    First Answer First Comment Friend Collector Seventh Anniversary

    @ROM Why your default gateway IP for MGMT VLAN, VLAN 10 and VLAN 100 are all 0.0.0.0??

  • ROM
    ROM Posts: 3  Freshman Member
    First Comment Friend Collector

    @TomorrowOcean I just don't have a real neighbor switch to define real gateways. I tried to forward VLANs just for testing before I connect to the factory network.

  • EvoTech
    EvoTech Posts: 1  Freshman Member
    First Comment

    Like Sakura_T said, within a Layer 2 switch traffic cannot be routed between VLANs. If you just need to restrict internal_network ping factory network, you can try one VLAN and use ACL to block icmp packet from internal to factory.

  • Zyxel_Derrick
    Zyxel_Derrick Posts: 126  Zyxel Employee
    5 Answers First Comment Friend Collector First Anniversary

    Hi Rom


    To sum up

    GS1920 series is a L2 switch and it can not do the routing

    Since you have two VLANs, you have to do the routing so they can communicate with each other.

    Therefore, you may need a L3 device to achieve your goal

    May I know do you have any other question?

    Thanks


    Zyxel_Derrick

Categories

Switch Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）