D-Link Forums

D-Link VPN Router => DSR-500 => Topic started by: mmolvid on June 07, 2017, 10:15:31 AM

Title: DSR-500 and VLAN
Post by: mmolvid on June 07, 2017, 10:15:31 AM
First to explain, I have tried to set up a GUEST NETWORK that is only connected to the internet not the rest of the computers on the switch.

I have a DSR-500 connected to the Internet (HW-A FW 2.10).
After that i have a DGS-1210-24P (connected to the DSR in PORT 21)
As a final I have a CWM-100 system connected with multiple SSIDs.

Now i have used a guide (http://www.dlink.com/es/es/support/faq/software/cwm/uk_cwm_100_how_to_setup_multiple_ssids_and_vlans) to see how I need to tag and untag different ports in the VLAN. However This all seems to complicated for me as I have not been able to get the GUEST network to connect to the internet. I think the problem is that I have a swich inbetween the DSR and the SSIDs on the CWM-100. How do I need to setup the DSR and the switch for this to work???

I have included a PDF file for you all to see how I have made the differnet configs:

 http://email.dropsend.com/wf/click?upn=h413JQpvtnO0rWHPCtzS8DVISu7H8cmXDmErIJXBru1xen7VOOuZX6AaxSuGHvPkE8HnMlrZtw9D1meTQdl8EQ-3D-3D_D5veycye7na-2B1SS7d3OA2W3aaJpKxxiWJ8wZilWtSH3cAjBV6hj4u7DsKxGaQbdqmXBYhnbZ-2F7kharpP3VXLLMpKCGdI77v8deeq4dEgD7SDEFvyx28w-2B4Jo4TcoBNMkpToZHd4OoIrJYA0a1LHg6AafpKqrRygXvnqAH-2B3unWkXlT0J8fbBcYUKWqqpSCVhuDPK4QGJqNAwdusf03kT2zWaln-2F0sz3vwAIBjnNdq1gVpltDvvq1iLbaJkMkX3ZToqDYyEKAKtJONfN6ZLREsQ-3D-3D  (http://email.dropsend.com/wf/click?upn=h413JQpvtnO0rWHPCtzS8DVISu7H8cmXDmErIJXBru1xen7VOOuZX6AaxSuGHvPkE8HnMlrZtw9D1meTQdl8EQ-3D-3D_D5veycye7na-2B1SS7d3OA2W3aaJpKxxiWJ8wZilWtSH3cAjBV6hj4u7DsKxGaQbdqmXBYhnbZ-2F7kharpP3VXLLMpKCGdI77v8deeq4dEgD7SDEFvyx28w-2B4Jo4TcoBNMkpToZHd4OoIrJYA0a1LHg6AafpKqrRygXvnqAH-2B3unWkXlT0J8fbBcYUKWqqpSCVhuDPK4QGJqNAwdusf03kT2zWaln-2F0sz3vwAIBjnNdq1gVpltDvvq1iLbaJkMkX3ZToqDYyEKAKtJONfN6ZLREsQ-3D-3D)

Note that VLAN 3 and 4 are only supposed to connect to the internet and not the other computers

On port 4 and 12 I have the APs and on port 21 the DSR-500(all ports are physical on the switch)

Many thanks for your help!

//Matt
Title: Re: DSR-500 and VLAN
Post by: FurryNutz on June 07, 2017, 02:58:41 PM
Link>Welcome! (http://forums.dlink.com/index.php?topic=48135.0)




Internet Service Provider and Modem Configurations

FYI, Rev A and B FW can be found here:
http://support.dlink.com/ProductInfo.aspx?m=DSR-500 (http://support.dlink.com/ProductInfo.aspx?m=DSR-500)
v3.xx is for Rev B model DSRs.
Title: Re: DSR-500 and VLAN
Post by: PacketTracer on June 07, 2017, 04:23:38 PM
Hi,

at a first glance: Assigning two untagged VLANs (4,10) to the same "port" (SSID3(2.4G)), does not look like a correct configuration - hence use a different port (e.G. SSID4(2.4G)) for VLAN 10 (=GUEST2) and set PVID=10 for SSID4(2.4G). Same problem with two untagged VLANs (1,2) on the same port "LAN1" - VLAN 2 should be sent "tagged" (which corresponds to your DGS switch configuration for ports 4 ans 12 respectively). Your DGS switch ports look fine, except that tagged VLAN 10 (GUEST2) is missing for ports 4, 12 and 21. In your router a configuration for VLAN 10 has still to be done, given that VLAN 10 (aka GUEST2) shall have Internet access.

PT
Title: Re: DSR-500 and VLAN
Post by: mmolvid on June 08, 2017, 12:51:04 AM
Link>Welcome! (http://forums.dlink.com/index.php?topic=48135.0)


  • What region are you located?


Internet Service Provider and Modem Configurations
  • What ISP Service do you have? Cable or DSL?
  • What ISP Modem Mfr. and model # do you have?



FYI, Rev A and B FW can be found here:
http://support.dlink.com/ProductInfo.aspx?m=DSR-500 (http://support.dlink.com/ProductInfo.aspx?m=DSR-500)
v3.xx is for Rev B model DSRs.

1. I am currently living in Sweden after spending 10 years in the US. That is also where I bought the DSR-500 and the reason I turned to this forum since the DSR-500 is not sold i Europe, hence there is no support for the 500 in the EU. In Europe only the DSR-500N i sold.

2. I have a direct connection to the internet via fibre with a public IP adress.

3. Ok, when I looked up your latest post regarding FW for the 500 it says both for HW rev A1 and B1. But now I hav FW on a Rev A1 FW 2.11

Regards

//Matt
Title: Re: DSR-500 and VLAN
Post by: mmolvid on June 08, 2017, 02:04:36 AM
Hi,

at a first glance: Assigning two untagged VLANs (4,10) to the same "port" (SSID3(2.4G)), does not look like a correct configuration - hence use a different port (e.G. SSID4(2.4G)) for VLAN 10 (=GUEST2) and set PVID=10 for SSID4(2.4G). Same problem with two untagged VLANs (1,2) on the same port "LAN1" - VLAN 2 should be sent "tagged" (which corresponds to your DGS switch configuration for ports 4 ans 12 respectively). Your DGS switch ports look fine, except that tagged VLAN 10 (GUEST2) is missing for ports 4, 12 and 21. In your router a configuration for VLAN 10 has still to be done, given that VLAN 10 (aka GUEST2) shall have Internet access.

PT

Ok, this might have solved the problem! I changed the LAN1 to tagged in the CWM-100 module for SSID1 and at least the devices on SSID 2 and 3 now get the IP they are supposed to get...

Will do some more tests but itīs a huge step forward, many thanks!

//MOM
Title: Re: DSR-500 and VLAN
Post by: FurryNutz on January 02, 2018, 01:15:17 PM
Enjoy.  ;)