2

Good Evening. I need some help with a simple network configuration:

I actually have one physical LAN including a shared printer, a shared gateway/firewall (Cisco) for internet access, two Access Points all connected via a D-LINK DGS 1210 24 ports.

I'd like to create two VLANs, as two different companies are using the same LAN and pcs of each company can see the other company ones, but they need to both have access to the printer, the gateway/dhcp (192.168.2.1) and one access point each.

I was thinking about this setup:

VLAN 1: ports of Company 1 + printer port + router port + access point 1 port untagged - ports of company 2 not member

VLAN 2: ports of Company 2 + printer port + router port + access point 2 port untagged - ports of company 1 not member

Is it a correct configuration?

Step 2: PVID: how do I configure PVID of the shared ports (printer and Router)?

I mean, e.g., if port 3 belongs to company 1 it will be PVID=1, but what about PVID for shared ports, e.g. number 16 (the router port)? If i set PVID= 2 company 2 (VLAN 2) will be able to access the internet via the router but not company 1...

Thanks in advance for the support.

Improve this question
1
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin ♦
    Apr 1, 2018 at 19:53

1 Answer 1

Reset to default
1

Interfaces that have multiple VLANs are trunks. You can configure a trunk to a router, but you will need to use subinterfaces on the router. Most end-devices, e.g. printers, don't understand VLAN tagging on trunks. Some servers can be configured to use VLAN tagging and trunks.

You will either need to use separate printers, or you will need to configure routing between the VLANs (default on a router). If you want to restrict everything between the VLANs, except the printer, you will need to create ACLs to block everything, except the printer.

This is a fairly common configuration.

Improve this answer
2
  • Thank you for the fast reply Ron, so, basically, it is not possible using only a setup of the switch I understand.
    – InflatableGull
    Jan 16, 2018 at 21:52
  • You need to route traffic between VLANs, and you have a router that should be capable of that. Configure a subinterface for each VLAN on the router, and a trunk to the router on the switch. This is a simple configuration that is done all the time.
    – Ron Maupin ♦
    Jan 16, 2018 at 21:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.