D-Link Forums

D-Link Enterprise => DGS-1100-Series => Topic started by: leftylooser on July 28, 2019, 06:28:47 AM

Title: DGS-1100 how to segregate private network from tenant
Post by: leftylooser on July 28, 2019, 06:28:47 AM
Hi there!

I want to share my internet connection with my tenant, but segregate his network from my private to avoid insight/hacking/pishing

The tenant apartment has two ethernet socket outlets that are wired to the technical room where my router/modem and switch is located. A dedicated wifi access point will be connected to one of the sockets, providing the tenant to have his own wifi network
I have a DGS-1100 switch that i belive (hope...) can segregate the networks using multiple VLANs - isolating two ports dedicated to tenant apartment, with no access to the other, private ports.
Can anyone guide me how to do this?
I suppose I can also make a separate VLAN for IoT-devices in the same way - to avoid "outsiders" into my network via IoT-devices?

Thankful for all help.

-lefty
Title: Re: DGS-1100 how to segregate private network from tenant
Post by: FurryNutz on August 02, 2019, 06:14:49 AM
Review the user manual for information regarding this.
Title: Re: DGS-1100 how to segregate private network from tenant
Post by: leftylooser on August 06, 2019, 05:18:36 AM
The user manual have been scrutinized a number of times, but it doesn't describe how to segregate VLANs
My problem is supposedly of a basic VLAN understanding, rather than D-Link switch specific issue. What I am looking for is a walk-through of basic VLAN segregation, preferrably put in context with  D-Link's interface.
The websites and youtube-videos I find on the subject are either too basic - explaining VLAN philosophy, or too complicated - digging deep into Cisco's enterprise-targeted switches.
I wanted some opinions or practical example of how network can be segregated using this switch. How safe is such segregation? Is the DGS-1100 switch suited for this, or should I rather get one with subnet capabilities?

Again thankful for all information
Title: Re: DGS-1100 how to segregate private network from tenant
Post by: FurryNutz on August 06, 2019, 06:36:13 AM
Any of these point you in a right direction?
http://businessblog.us.dlink.com/set-up-vlan-web-smart-switch/ (http://businessblog.us.dlink.com/set-up-vlan-web-smart-switch/)
https://www.smallnetbuilder.com/lanwan/lanwan-howto/30071-vlan-how-to-segmenting-a-small-lan (https://www.smallnetbuilder.com/lanwan/lanwan-howto/30071-vlan-how-to-segmenting-a-small-lan)
https://www.youtube.com/watch?v=Cy1-N9cRHxE (https://www.youtube.com/watch?v=Cy1-N9cRHxE)
Title: Re: DGS-1100 how to segregate private network from tenant
Post by: leftylooser on August 06, 2019, 07:20:22 AM
Thank you for the links - much obliged!
I will check them out. (I did in fact find the youtube linked video myself, but disregarded it as I can't read Malay(?) - anyway, I'll check it out)

Thanks again.

-LL
Title: Re: DGS-1100 how to segregate private network from tenant
Post by: FurryNutz on August 06, 2019, 07:36:58 AM
Let us know how it goes...
Title: Re: DGS-1100 how to segregate private network from tenant
Post by: leftylooser on August 08, 2019, 01:45:57 PM
Edit: Post deleted, as it seems the enclosed images are not shown no matter which image host site I use
Title: Re: DGS-1100 how to segregate private network from tenant
Post by: FurryNutz on August 09, 2019, 09:56:03 AM
Adding Screenshots In A Post - Adding Screenshots In A Post (http://forums.dlink.com/index.php?topic=58120.0)

I use IMGBB.com site
Title: Re: DGS-1100 how to segregate private network from tenant
Post by: leftylooser on August 09, 2019, 01:24:01 PM
Adding Screenshots In A Post - Adding Screenshots In A Post (http://forums.dlink.com/index.php?topic=58120.0)

I use IMGBB.com site

yes... been there, done that
tried different image host sites including IMGBB, none of the attempts included images in the post ::)

anyway, I just wanted to verify that my VLAN port settings and PVID table were logically related to my network topology, as practical examples related to my situation are hard to find out there... Now, IŽll just give it a try and see how it goes...