Communication between VLANS

USG 40/ USG40W/ USG60/ USG60W/ USG110/ USG210/ USG310
USG 20/ USG 20W/ USG 50/ USG 100/ USG 200/ USG 300/ USG 1000/ USG 2000

Moderator: AliceShih

Communication between VLANS

Postby placebo3681 on Wed Jun 07, 2017 12:45 am

Good day forum

Looking to get some assistance on VLANs. I'm currently using a USG110 with a GS1920-48HP switch. I have a few VLANs set up (thank you, Zyxel support!), and I would like to set up some of them to talk to each other. (i.e. VLAN20 can send/receive data from VLAN30). Both VLANs have different IP address ranges (192.168.10.X and 192.168.20.X). I was informed by Support that as long as the VLANs are in the same Zones then they can talk to each other. While I do have them set up as they same zones, I cannot ping from one to the other and I'm sure I'm missing something here. Can intervlan communication be setup at the switch or does it have to be configured on the USG? Has anyone else tried this? If there is a specific link, please point me the direction and I'll read it over. Thank you in advance forum!
placebo3681
Newbie
Newbie
 
Posts: 4
Cash: 5
Joined: Sun Jun 04, 2017 2:58 am

Re: Communication between VLANS

Postby PeterUK on Wed Jun 07, 2017 4:07 am

How are the address ranges setup to the USG110? Do you have them on one port (lan1) with the VLAN or one VLAN for address ranges on one port (lan1) and another VLAN for address ranges on another port (lan2)?

You could run a ping -t then check the logs if its being dropped.
PeterUK
Junior
Junior
 
Posts: 64
Cash: 66
Joined: Tue Mar 04, 2014 7:41 pm

Re: Communication between VLANS

Postby placebo3681 on Wed Jun 07, 2017 6:38 am

So all the VLANs are on LAN1. Right now everything goes through 1 cable from teh switch to the USG (I've been meaning to call support to see if I can have multiple cables from the switch back to the USG to relieve congestion, but that's a topic for another time I guess). Address ranges all start with 192.168. If I have a VLAN20, then the address range is 192.168.20.1 to 192.168.20.50. For VLAN30 192.168.30.1 to 192.168.30.50, etc. All the DHCP server IP addresses for the VLANs are 192.168.(VLAN NUMBER).100. Hope that makes sense.
placebo3681
Newbie
Newbie
 
Posts: 4
Cash: 5
Joined: Sun Jun 04, 2017 2:58 am

Re: Communication between VLANS

Postby parnassus on Sat Jun 10, 2017 8:46 am

Put that way it looks like the USG has the duty to provide and to manage the inter-VLANs routing (routing between differents VLANs)...
parnassus
Newbie
Newbie
 
Posts: 11
Cash: 12
Joined: Fri Nov 25, 2016 3:41 pm

Re: Communication between VLANS

Postby PeterUK on Sun Jun 11, 2017 1:36 pm

When you view your VLAN setup do both show for Zone as LAN1 or does is show as none?

If both LAN1 then you might need a firewall rule to allow from LAN1 to LAN1

Edit: after some testing this end the following below works

It is better to setup your own zones for VLAN in object > zone

so VLAN20 is in zone VLAN20 and VLAN30 is in zone VLAN30 then firewall from VLAN20 to VLAN30 and VLAN30 to VLAN20.
PeterUK
Junior
Junior
 
Posts: 64
Cash: 66
Joined: Tue Mar 04, 2014 7:41 pm


Return to USG series

Who is online

Users browsing this forum: Bing [Bot] and 2 guests

forum statistics View Forum Stats
© Copyright 1995-2009, ZyXEL Communications Corp. All rights reserved.