Link to home
Start Free TrialLog in
Avatar of Pro Suite
Pro SuiteFlag for Belgium

asked on

VLAN question

We currently have a switch with a VLAN 20 in the 172.16.0.x range. We need to add a second VLAN 69 to it that is in the 10.10.69.x range.

VLAN 69 is connected to a separate router on port 5, so my question is:

Will it work if I tag port 10 in VLAN 69 and make 11,12,13,14,15 member of VLAN 69? Will they be able to communicate with the router if I tag VLAN 69 on the router? VLAN 20 and 69 need to be able to communicate with each other as well.
Avatar of Andy M
Andy M
Flag of United Kingdom of Great Britain and Northern Ireland image

If your router is VLAN capable and you have it tagged on VLAN 69 and Port 5 on the switch tagged on 69 then that will communicate (if it's not VLAN capable then have port 5 untagged on VLAN 69 and it should work fine). If you have ports 11-15 either tagged (for VLAN capable devices) or Untagged (for typical devices like PC's) on VLAN 69 then they should communicate fine with the router as well.

Regarding having both VLANS communicate with each other - you'd need some sort of routing device between the networks that can provide this functionality and have that device able to see both VLANS on the switch (probably using 2 ports - one tagged for 69, one tagged for 20)
Avatar of skullnobrains
skullnobrains

assuming your existing setup worked previously and the hosts' gateways in vlan 20 were one of the router's ip, as long as the router has an ip in the 10.10.69.x range and that ip is the gateway of the hosts on the new range, they will be able to communicate with the existing hosts.

note that you may have ACLs that block some or all of the traffic. also note that if you don't use ACLs, there is little to no point in having different vlans since basically ALL the traffic is allowed between them.
Avatar of Pro Suite

ASKER

Ok, thanks for the info guys.

Just one more question: is tagging the same as trunking?
no

in vlan context, a trunk is a connection over which tagged packets are sent

when you connect a host to a switch, usually the host is not aware of the vlan it is in. packets between the host and switch are not tagged. but the switch will let tagged packets in the corresponding vlan reach that host, untagging them in the process. and reversely it will tag packets sent by the host in that same vlan.

this happens when packets enter or leave the switch so this process amount to one tagging and one untagging when 2 hosts from the same vlan communicate with each other.

with trunks, both equipments send and receive tagged packets and act accordingly usually without performing any tranformations.

so when 2 hosts on different trunked switches speak together, the packets are tagged when they enter the first switch, then sent unchanged over the trunk by the first switch, accepted unmodified by the second switch, then untagged when they leave the second switch
I'm a bit confused, here's it what I get:

if you have 2 switches, each with ports 1-10 in VLAN 10 and ports 11-22 in VLAN 20.

You want PC's to be in VLAN 10 and Servers to be in VLAN 20, so you would :

VLAN10 untag ports 1-10 on each switch
VLAN20 untag ports 11-22 on each switch

This sets your hosts up. You want to use interface 24 to connect the switches.

VLAN10 tag port 24
VLAN20 tag port 24

So, the Interswitch links are TAGGED and the hosts are UNTAGGED

Now I'm confused where the trunking comes in.

I'm using HP Switches for this, HPE OfficeConnect 1920 24G.
ASKER CERTIFIED SOLUTION
Avatar of skullnobrains
skullnobrains

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Problem solved by skullnobrains