VLANs Setup on Flex 500H

Options
jayd691
jayd691 Posts: 25  Freshman Member
Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula
in USG FLEX H Series

I am trying to set up my Flex 500H with 5 Vlans, all using separate ports instead of router-on-a-stick style.

Can someone assist me with the setup on the Flex 500H (I am a previous Cisco guy).

How do I setup the base ports (ip addresses, etc)?

I will use one vlan for management, and can set up the vlans but do not know how to setup all the base ports such as do they need their own ip addresses? If so, do I use one subnet for the base ports (192.168.1.2, 192.168.1.3, 192.168.1.5, 192.168.1.5)?

Any help will be greatly appreciated. Thank you.

Accepted Solution

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,430  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    edited June 16 Answer ✓
    https://community.zyxel.com/en/discussion/comment/77961#Comment_77961

    Hi @jayd691,

    Thanks for sharing more details with us. Based on your requirement, you can leave the based port without IP address and only set VLAN IP address.

    For me, I will set the ethernet interfaces based on your VLAN interfaces since one VLAN can only belong to one ethernet interface.

    For example, P7 and P8 are VLAN 10 interface's members, so these ports will be the same ethernet interface.

    P.S. remember to keep the default ethernet interface to have an IP address, so you can access USG FLEX 500H when directly connecting.

    Zyxel Melen


All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,430  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @jayd691

    VLAN is based on ethernet interface, so, please ensure each port are ethernet interface member (ge3 and ge4 in my example video). Then, add VLAN interface for specific port.

    https://jam.dev/c/441033e0-2040-4f6d-b689-886a080349ad

    You can assign IP address for the VLAN interface or not. And different VLAN interfaces will have different IP addresses and subnet ranges.

    Hope it helps.

    Zyxel Melen


  • PeterUK
    PeterUK Posts: 3,862  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    From what I read its like you want many VLAN's on the same subnet?

  • jayd691
    jayd691 Posts: 25  Freshman Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula

    In the video you used g3 which has 192.168.168.1 as the base port.

    If I were to use p7-p12 for my vlans, do I need to set an ip address to each of these ports? If so, would the ip addresses be on the same subnet or multiple subnets? Or would the base ports not need any ip address and only the vlan ip address?

    I currently have an issue on my Flex 700 which does not use vlans on the Flex 700 (due to the base port issue of me not knowing how toset it up properly), and have my vlan ip addresses set on each port and then normal setup for switch and AP's. Whenever a new device connects to any wireless ssid, it gets the correct vlan address, but always exits the switch to the firewall on the management port instead of the correct port for the vlan.

    Thank you!

  • jayd691
    jayd691 Posts: 25  Freshman Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula
    https://community.zyxel.com/en/discussion/comment/77871#Comment_77871

    That scenario I described may be incorrect as I am not sure how to do this. I just want 6 vlans (with one as management vlan to assign ip's to switch and AP's) and set them up old-fashioned style with one vlan per port. I do not understand if I need an ip on the base port. If I do need an ip on the base port, I was asking if those ip addresses would be on the same subnet or not.

  • PeterUK
    PeterUK Posts: 3,862  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Think I get what you mean with non H models you have to had a untag base port to which you then add VLANs to it the H models (not sure if its all) you can just do a VLAN for a given port no untag base port needed

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,430  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    edited June 16 Answer ✓
    https://community.zyxel.com/en/discussion/comment/77961#Comment_77961

    Hi @jayd691,

    Thanks for sharing more details with us. Based on your requirement, you can leave the based port without IP address and only set VLAN IP address.

    For me, I will set the ethernet interfaces based on your VLAN interfaces since one VLAN can only belong to one ethernet interface.

    For example, P7 and P8 are VLAN 10 interface's members, so these ports will be the same ethernet interface.

    P.S. remember to keep the default ethernet interface to have an IP address, so you can access USG FLEX 500H when directly connecting.

    Zyxel Melen


  • jayd691
    jayd691 Posts: 25  Freshman Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula

    Thank you all for the help. I will see how it goes just assigning the vlan ip addresses. If needed, I will come back with new questions.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）