Beginners Guide to VLAN with Netgear & Ubiquiti HW VLAN101?

Question

I've got a few questions related to networking, more specifically VLAN'ing.

I've got a Gateway/Router - Ubiquiti USG

I've got a 48Port Netgear Switch - Netgear GS748Tv5 L2+/L3 Lite

I've got 5 Ubiquiti UniFi Wireless Access Points connected to the Netgear switch

Can someone give me some basic documentation on how I should go about setting up multiple VLAN's on both devices.

I have created the 4 Networks that I wish to operate. All have DHCP on for their respective IP ranges. Network A - Private | 192.168.15.x | VLAN ID 1

Network B - Guest | 192.168..x | VLAN ID 50

Network C - AV | 192.168..x | VLAN ID 20

Network D - POS | 192.168..x | VLAN ID 10

I need Network A to be able to access the WAN & Network D I need Network B to be able to access the WAN Only I need network C to be able to access the WAN and potentially a device on Network A I need network D to be able to access Network A and one device to access the WAN.

Each Network is going to be accessible via Wifi, and the Wifi Points are Ubiquiti devices, so they seem to integrate quite easily into the Ubiquiti controller and have had the VLAN ID's associated with the respective Wifi networks.

For wired devices I know I can set certain ports on the switch to automatically assign those devices to a certain VLAN so that will solve the issue of handling wired devices in a VLAN scenario.

Currently I'm not getting any DHCP out of the router when I connect to a Wifi network other than the default one.

I know I must be missing a step somewhere but I'm not confident on what I've missed. I have created the VLAN's in the switch but I'm not sure if the switch is letting the DHCP traffic go from the USG port to the Wifi devices?

Any help with this is greatly appreciated.

Answer 1

Well, there is a lot here and a few different places it could be:

1. Make sure the interfaces on your USG are set as tagged interfaces so they are dropping their info tagged into the switch.

2. You said you need some east/west (vlan to vlan) communication blocked. Do you have any rules on the USG preventing that now?

3. Make sure the interface going to your USG and to your APs are setup as trunks and are configured to pass the tagged traffic (have the VLANs configured on them). If the USG configured anything like the Ubiquity switch I've configured, the interfaces are a little tricky from the GUI. Configure the VLAN and then make sure on the interface facing your Netgear they are set to "T" for trunk (if I remember right - I can't get into my switch for some reason right now...)

4. Have you verified you get DHCP addresses on those other VLANs when wired? If so, then it's an issue with tagging to your APs (we #3). If not, you might have a tagging issue or interface configuration issue going to your USG (#1, #2 or even possibly #3).