YiHsien  Freshman Member

您好： 相關設定畫面如下：

您好： 謝謝您的說明。 因為我們NAS端已經有設定Link Aggregation，目前在Switch端沒有設定的狀況下看起來也可正常運作。 請問此時在GS1900有或沒有再設定Link Aggregation的差異為何？

Hi Melen, Thanks for the reply. Since our two VLANs use the same trunk port to Fortigate, could it be the bottleneck? Can we use two trunk ports from GS1900 to Fortigate 30E(one port for VLAN1 and the other trunk port for VLAN3) ? And will it solve our bottleneck problem? Thank you.

Hi Melen, I use iPerf3. I installed iPerf3 on our synology NAS and treat the NAS as the iPerf3 server and use three different PCs at different VLANs as the iPerf3 client to make this test. Yes, Fortigate 30E is the default gateway for VLAN 1 and VLAN 3.

Hi Melan, Thank you for reply. Do you mean since the server is a VLAN-unaware device, it can only be connected to a untagged port (because if it receives a packet with a VLAN tag, that packet will be ignored so the connection will fail)?

Thanks Melen, Our server works with untagged port. I am confused that why a a VLAN-aware device will only work under a untagged port? (it doesn't work under a tagged port) Thanks again.

I found something strange. I use wireshark to monitor the packets. And I found one of our server (192.168.0.22) keeps doing ARP broadcast. (10~20 times per second) Is it normal? 

Our settings are the same as your screen shots. As for the static IP addresses, we have static IP addresses on the phones just simply because it is simple. (We don't have to deal with the DHCP settings on the firewall.)

Hi~ 1. The voice quality is not bad all the time. It could be ok at the beginning of a call but get worse during the call. Normally a call may only last a few minutes, and I cannot see any network activities that could affect the voice quality. 2. Our calls are mostly from outside. The incoming phone lines are 'real'…

Yes, the PCs are in VLAN1. We were just testing if PC can access the internet in VLAN2. We have now successfully put the phone controller and phones in VLAN2 but our voice quality issues still exist. I am wondering if you have any advises? We were told that we can try to separate VLAN1 and VLAN2 in two different physical…

Thank you. We have set the DNS directly on the devices (PC, phone system controller) and we can access the internet successfully now. Thank you.

We have tried your last steps using PING command. And Yes, we can get 8.8.8.8 respond, but failed if we ping a domain name. I feel we should add a DNS to our whole VLAN2 not only the phone system. I know we can set the DNS in the phone system and in the PC individually. Can we set the DNS in firewall and apply to all…

Hi Our DNS still doesn't work on VLAN2. (We can ping a outside IP but we cannot access a outside website via domain name) Here are the screen shots (sorry in Chinese):

Thank you. Yes, our problem is DNS just doesn't work on VLAN2. I just checked and found there is Nothing on the DNS server entries. I have added one and selected our VLAN2 in the drop-down box under "Interface". (Other options are 'lan', 'wan', and 'SSL VPN'). I'll see if it works in the office tomorrow morning.

We are now in step 3. And I have added some policies to allow traffic from VLAN1 to VLAN2, VLAN2 to VLAN1, and VLAN2 to Internet. The results are: 1. We can PING 192.168.2.1 and our other devices in VLAN1. 2 We can also ping the internet via IP address (like 8.8.8.8). 3. We can access the internet via IP address. 4. We can…