Understanding VLAN function


#1

Hello,

I recently purchased a Balance One (6.1.1 firmware) and I am trying to understand some of the available options.

If I have some security cameras that I wanted to move to a VLAN (192.168.2.x) will those cameras be reachable/viewable from the 192.168.1.x network if I enable the VLAN trunking option on the Balance One LAN interface?
If so, do those endpoints need to be directly connected to the Balance One or can they run through a switch?

Camera (192.168.2.5) —|[INDENT=4]Switch (unmanaged)------- Balance One (Primary LAN IP 192.168.1.1 + trunking enabled as VLAN 2 w/ ip 192.168.2.1)[/INDENT]
PC (192.168.1.5) —|

Thanks in advance.


#2

We support 802.1q VLAN tagging, so you will need a manageable switch that also supports it.

Thanks -Tim


#3

Tim,

Thanks for the speedy reply. I’ll look into a managed switch if this becomes a priority.


#4

Hi Tim,

How about if it is a wi-fi client like an iphone/laptop associated to an SSID that is tied up to VLAN (192.168.2.x) as mentioned above, will those clients be reachable from 192.168.1.x???

Correct me if I am wrong but I think they will reachable as by default, Peplink has inter-VLAN communication enabled internally. If you want to limit this communication between VLANs, you may accomplish it at the outbound firewall.


#5

Yes, with the current firmware those clients would be reachable if not blocked via the firewall.

When we release firmware 6.1.2 there will be a one-click button to disable inter-VLAN routing.

Thanks -Tim