[Solved] Issues communicating on VLANs with Firewalla Gold

Follow

Joshua Wood

• November 09, 2021 11:40
• Edited

Hi,

I purchased a TP-Link SG1016PE switch (hardware version 3.20). Updated to latest firmware.

I spent the weekend configuring VLANs on the Firewalla and switch. Had some issues, so I rolled everything back to unmanaged VLAN1 and deleted the VLANs on Firewalla.

For my testing, I had untagged VLAN1 which is my default from before, 192.168.1.0/24 (connect to port 1 on the Firewalla)

I created an additional VLAN2 tagged, 192.168.2.0/24 and (connected to port 2 of the Firewalla).

I picked a port of a device (Nvidia shield in this instance) that I could test on, and tagged it to VLAN2, and removed it's membership from any other VLANs. I rebooted the device, and even unplugged/plugged back in the ethernet cable. The device was unable to get an IP address. I even tried setting a static IP address and it could not communicate on the network.

Any suggestions what's going wrong?

edit: adding configs. note, the end device is connected to port 7 on the switch. the firewalla is connect from its port 1 to port 16 on the switch

LAN1:

VLAN2:

Switch
VLAN1

VLAN2

0

• 

  Firewalla

  • November 08, 2021 02:28

  The port connecting to Firewalla Gold must be tagged or "trunk" port. Make sure you set to that. This is the most common mistake we see

  1

  Comment actions Permalink
• 

  Joshua Wood

  • November 08, 2021 09:49

  Hi,

  Yes, I made the VLAN a trunk (tagged port) on the Firewalla port.

  I made the end device an access port (untagged) on the same VLAN as the trunk port I tagged.

  The end device was unable to get an IP address. I also tried giving it a static IP and it still couldn't communicate on the network.

  I created another VLAN for my docker server which is trunk as the docker tags the VLAN for the server, and it was able to get an IP address fine.

  For some reason the untagged network was not able communicate on the newly created VLAN.

  0

  Comment actions Permalink
• 

  Firewalla

  • November 08, 2021 17:02

  probably best post your configuration on the switch and see if anyone here knows how to configure it. (And another common mistake we see is using the wrong VLAN ID on the firewalla and the switch. check that too)

  0

  Comment actions Permalink
• 

  Joshua Wood

  • November 08, 2021 22:47

  I've updated the post with screenshots and further explanation.

  0

  Comment actions Permalink
• 

  Client Support

  • November 08, 2021 23:59
  • Edited

  Hi @Joshua, Have you set your PVID correctly? Have a look at the TP-Link documentation.
  
  https://www.manua.ls/tp-link/tl-sg1016pe/manual?p=42

  2

  Comment actions Permalink
• 

  Joshua Wood

  • November 09, 2021 00:27

  Thanks @Client Support
  I'm not at home at the moment, but I'll try this when I get home

  0

  Comment actions Permalink
• 

  Joshua Wood

  • November 09, 2021 11:38

  The Pvid settings were the key! Thank you

  0

  Comment actions Permalink

Please sign in to leave a comment.