We help IT Professionals succeed at work.

What should my switch IP adress be?

I am looking for a quick answer, hence the points. I am new to networking and could really use some expert advice. I have a router with an IP address of (for example). I have a switch behind the router that will have three computers and two servers. I will also have a couple of personal computers behind the router connected to the same switch. My intentions was to have two Vlans, 1 for business and one for personal. My questions are as follows:
1. Should the IP address of the switch be within the router i.e. and Vlan 2 is
2. Should I use NAT with the switch and would that make it more secure?

I look forward to your answers and really appreciate your knowledge!
Thank You,
Watch Question

VLANs are Virtual Networks which mean they act as separate networks.

This means each VLAN should be part of a separate subnet. So if I assume you are using the default Class C subnets (Mask, then VLAN1 should look like 192.168.2.X and VLAN2 should look like 192.168.3.X

You will need to route between the VLANs in your setup to access your router which I assume will be part of a 3rd VLAN.

Regarding the NAT Question, since 192.168.x.x addresses are non-Internet addresses, you definitely will need to have NAT enabled on the router if you want these machines to access the Internet and have enough IPs for VLANs.


Thanks for your quick reply! A couple other questions.
1. If my Vlan 1 is would all other devices need to be below or above the xxx.xxx.x.100 point. (i.e. or 192.168.2. 101
2. Could you please further define what you mean by route between Vlan and router. Does that mean that my router should or should not be 192.168.x.xx. Could you please explain, I am trying to understand this but for some reason it is not clicking!
Thank You Again!
Answer to Qustion1:
Vlan1 will comprise of the entire range of 192.168.2.x segment meaning all devices on this VLAN will follow this address range. So the VLAN1 itself will not have a specific address as - This address could be assigned for the router if you wish. Another machine on the same VLAN1 can have an IP address of for instance but will need to define a routing IP within the same segment (in this example, router=; at the same time, another workstation or server on this VLAN1 can be assigned IP address of if you wish and will have the same routing IP defined ( Similarly for VLAN2, you will have workstations and/or servers in the 192.168.3.x range with a predifined router IP address of (for this example, can be since you can not use as that belongs to VLAN1). This also means your router will require an IP address for each VLAN so that it can route and be seen by the 3 VLANs.

Answer to Question 2:
I explained this in Question 1; but to simplify, you have only 1 router which will be assigned 3 IP addresses: and and (they might be called primary and secondary IP addresses depending on make and model of your router).

If this still sounds too complicated, perhaps you should not deal with VLANs, and put all machines on the same segment which will simplify your requirements in defining the router to only 1 IP address and all machines will see each other.


THank You, I understand what you are saying. I really appreciate your help!

Explore More ContentExplore courses, solutions, and other research materials related to this topic.