WRVS4400n VLAN Help

I have just received a Cisco WRVS4400N v2.0.0.7 Router & trying to configure it like this:
2 VLANs & 2 wireless SSIDs
VLAN1 default (Port 1 on Router)
VLAN2 for Office (Port 2 on Router) &
VLAN3 for Client/Guest (Port 3 on Router) no access to VLAN2
I would also like one of the wireless SSIDs to be on the same network as VLAN2 & have access to VLAN2
Also want VLAN2 to be network 192.168.2.0
I have accomblished all except I cannot get either wireless SSID to commnicate with VLAN2
VLAN DHCP creates scopes of 192.168.3.0 & 5.0 (I need to 192.168.2.0 to match my current office network)
I know I can change the router network to 192.168.2.0 but that would mean I would have my Office network on VLAN1 (Port 1 of Router), I thought
Port 1 was for the default VLAN used for Admin stuff.
Can anyone give me some suggestions on this?
Thanks for your help in advance.
Wayne

Hi HC-Ralph and welcome to the Cisco Home Community!
The WRVS4400N is now being handled by the Cisco Small Business Support Community.
For discussions about this product, please go here.
OnnagokorO

Similar Messages

Wrvs4400n vlans/ssid/dhcp issue

Hi all,
it will be great if someone will help me with my problem.
the problem is : our wrvs4400n wifi router configuration.
network description: we need 2 separated wifi networks one for guests and one for internal access, and i configured them on router, and also configured each one of them to different vlan, guests to vlan 200 and internal use default vlan 1.
vlan 1 configured as dhcp relay and its working pritty well.
vlan 200 configured as dhcp and the problem begins here.
somehow on vlan 200 i get dhcp from our externam dhcp server,
wrvs4400n conected as follow> lan port1/vlan 200 connected to firewall port(configured as vlan 200) and lan port 4/vlan1 conected to our main switch wich connected to firewall also.
i guess that my knowlege in networking its not so good......
how can i prevent from our internal dhcp to comunicate with vlan 200 ,
any help will be very appreciated.

Hi Rich,
You cannot have different L3 VLANs sharing the same subnet.
Each VLAN must have it's own subnet and then you have a routing device routing between both VLANs.
You should have a DHCP pool also for VLAN 111 configured on the DHCP server.
Even if you have ip helper address configured and this should be done on the VLAN111 interface of the switch, you still need a DHCP pool for VLAN 111 because the DHCP discovery is coming on VLAN 111.
Please take a look into this document:
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080665ceb.shtml.
Here it explains how to configure 2 ssids on 2 vlans and dhcp pool (on the switch itself) for each vlan.
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

WRVS4400N VLans

I have a WRVS4400N that broadcasts two different SSIDs. One is a public network and the second is a private network. Right now, both SSIDs are pulling from the same DHCP server, but I would like to separate the public from the private. How can I separate these SSIDs by vlans? I can't seem to get the vlans to route to separate ports.
This is my vlan settings. I have two DHCP servers right now. One is in an isolated network plugged into Port 3 of the WRVS4400N. The other is on the production network, plugged into port 1 of the WRVS4400N.
For some reason, whenever I connect to SSID Public, it won't pull an IP from the DHCP on port 1, it only pulls it from the one on port 2.
I know there is three SSIDs here, the Static one is going to be the same network as the EMS one.
SSIDs:
VLans:
Create VLans:
Port Settings VLan 1:
Port Settings VLan 2:
Any help is greatly appreciated!!!!

So heres my updated settings:

WRVS4400N VLAN Question

On what vlan, if any, is the wireless port configured? I can assign vlan 1-4 to any LAN (hardwired) port to isolate traffic, but not the wireless port. Do wireless packets go to vlan 1 by default and no other vlan #'s? I want to keep wireless traffic out of specific or all LAN ports, yet allow wireless access to the WAN port. Also, how is external VPN traffic routed if vlan is used? To what vlan is the VPN connection assigned? Kan't find any help in the documentation or on the web. The ability to isolate traffic is one of the main reasons for purchasing this product. THX

From what I know, although the WRVS4400N has support for port based VLAN setup, it does not give you the option to set different DHCP addresses for each of the 4 VLANS.

Wrvs4400n vlan setup

Hi, I have a linksys wrvs4400n router on which:
The wireless computers are connected to the home network (vlan 1)
Port 1 is connected to the home network (vlan 1)
Port 2 is connected to the office network (vlan 2)
And the printers are connected to port 3.
Now I'd like to setup the router in such a way that all computers have access to the printers (port 3), but I don't know what vlan settings I have to use on port 3, or if it is even possible...
I really hope someone can help me,
merc
Message Edited by merc on 06-18-2008 06:10 AM

if you enable inter-vlan routing, that will allow all vlans to communicate with each other.
for your current setup, if your printer supports 802.1q, you could set the port where the printer is connected to to trunk and member it on vlans 2 and 3.

WRVS4400N VLAN support

Hi all,
I recently purchased a WRVS4400N for my small lab network. I have a question in regards to how the VLANing works on this device.
My objective is to create 4 VLAN's
This is how I want my addressing to look like
VLAN 1 (Servers), Subnet: 172.16.0.0 /26, Gateway: 172.16.0.62
VLAN 2 (IT), Subnet: 172.16.0.64 /26, Gateway: 172.16.0.126
VLAN 3 (Marketing), Subnet: 172.16.0.128 /26, Gateway: 172.16.0.190
VLAN 4 (Design), Subnet: 172.16.0.192 /26, Gateway: 172.16.0.254
I wanted to know if this is possible on the WRVS4400N. Going through the router setup I do NOT see an option where I can assign an IP address range per VLAN. The only DHCP options I see is when I go iunto the LAN settings under Setup. It seems that I can only assign a spefific address range per subnet not by each virtual lan.
If anybody knows how to do this any help would be greatly appriciated!
Cheers
Graham R

The demo ui for the routers on the link you have mentioned are already outdated. Although the RVS4000 ui looks similar to that of WRVS4000N, there are still some features that are yet to be found on the latter.
On the RVS4000 Firmware v1.1.09 Release Notes, one of its features included:
*DHCP Server (in the Setup->LAN page) supports multiple subnets, once multiple VLANs are created.
I have not yet tried to configure vlan on an RVS4000 router since I do not have one, unfortunately . At the moment I am using an RV042.

Adsl and vlan help

hello, im new to ccna .
please any expert help me in this sinario,
router 1721 with one wic-1adsl ,i have adsl conection with irb static ip.
the router connect with mannaged switch through a trunk port.
the switch has 2 vlans one for the static IPs and the other for private lan.
i need the private lan to be able to go to internet please any ideas.
the router configuration is as follows:
Building configuration...
Current configuration : 1272 bytes
! Last configuration change at 16:50:18 pc Fri May 10 2013 by admin
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname BELCO
boot system tftp c1700-k9o3sy7-mz.122-15.T17.bin 62.x.x.7x
logging queue-limit 100
username admin privilege 15 password 0 HES2010
clock timezone pc 0
ip subnet-zero
ip cef
bridge irb
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 0/35
encapsulation aal5snap
dsl operating-mode auto
bridge-group 1
interface ATM1
no ip address
shutdown
no atm ilmi-keepalive
dsl operating-mode auto
interface FastEthernet0
no ip address
speed auto
interface FastEthernet0.1
description LAN
encapsulation dot1Q 1 native
ip address 192.168.1.10 255.255.255.0
interface FastEthernet0.2
description WAN
encapsulation dot1Q 2
ip address 62.x.x.7x 255.255.255.248
interface BVI1
mac-address 0000.0cc9.fa98
ip address 10.186.10.106 255.255.255.252
ip classless
ip route 0.0.0.0 0.0.0.0 BVI1
ip http server
ip http authentication local
bridge 1 protocol ieee
bridge 1 route ip
line con 0
speed 115200
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet
no scheduler allocate
end
so vlan2 can go to internet because it has the same subnet with provider but vlan 1 canot go internet.
so how i can make all vlans go internet(the router has only 1 fastethernet port)
thanks in advanced for any help.

OK, so you need to take IP from your public range and assign it to loopback interface.
OR you can use on both subinterfaces private addresses and entire public range use for PAT, statc NAT or what ever, it depends on your reqiurements. How many devices do you have on 62.135.115.72/29 subnet?
If I were you, I would choose second option because in first option you have to lower subnet mask on Fa0.2 from / 29 to /30 which leaves you with only 1 host on this LAN segment!!!
This configuration will ensure that subnet 192.168.1.0/24 will access internet with public IP 62.135.115.72 and subnet 192.168.2.0/24 will access internet with public IP 62.135.115.73.
And you still have 6 more free public IPs for what ever you will need them (static NAT, static portforward. VPN,....)
interface Loopback 72
ip add 62.135.115.72 255.255.255.255
ip nat outside
interface Loopback 73
ip add 62.135.115.73 255.255.255.255
ip nat outside
interface Loopback 74
ip add 62.135.115.74 255.255.255.255
ip nat outside
interface Loopback 75
ip add 62.135.115.75 255.255.255.255
ip nat outside
interface Loopback 76
ip add 62.135.115.76 255.255.255.255
ip nat outside
interface Loopback 77
ip add 62.135.115.77 255.255.255.255
ip nat outside
interface Loopback 78
ip add 62.135.115.78 255.255.255.255
ip nat outside
interface Loopback 79
ip add 62.135.115.79 255.255.255.255
ip nat outside
interface FastEthernet0.1
description LAN
encapsulation dot1Q 1 native
ip nat inside
ip address 192.168.1.10 255.255.255.0
interface FastEthernet0.2
description WAN
encapsulation dot1Q 2
ip nat inside
ip address 192.168.2.10 255.255.255.0
ip access-list extend NAT_ACL_1
deny ip 192.168.1.0 0.0.0.255 192.168.1.0 0.0.0.255
permit ip 192.168.1.0 0.0.0.255 any
deny ip any any
ip access-list extend NAT_ACL_2
deny ip 192.168.2.0 0.0.0.255 192.168.2.0 0.0.0.255
permit ip 192.168.2.0 0.0.0.255 any
deny ip any any
route-map NAT_MAP_1
match ip address NAT_ACL_1
route-map NAT_MAP_2
match ip address NAT_ACL_2
ip nat inside source route-map NAT_MAP_1 interface Loopback72 overload
ip nat inside source route-map NAT_MAP_2 interface Loopback73 overload
Best Regards
Please rate all helpful posts and close solved questions

VLAN Help - LRT214

So I thought I had VLAN configured properly, but my devices aren't getting IP addresses from the router. My goal is to setup a guest WiFi network with my LAPAC1750PRO WAP's.
I have a Linksys LRT214. My primary LAN is set as 10.0.1.1 for the router, reserved IP addresses from 10.0.1.2 - 10.0.1.99, and addresses for visitors, unassigned devices, etc. as 10.0.1.100-150.
I set up a separate VLAN (VLAN2) with the following config: Device IP 10.0.2.1, subnet 255.255.255.0 (same as primary LAN), DHCP server button checked, range start 10.0.2.100, range end 10.0.2.149, use DNS from ISP option enabled.
Under port management (802.1q settings): VLAN1 interVLAN routing disabled, device management enabled, LAN1-4 untagged. VLAN2 has interVLAN routing disabled, device management disabled, LAN1-4 tagged.
I have the SSID (VAP1) of the WAP assigned to VLAN2, the others VLAN1. Under the LAN settings of the LAPAC1750PRO, I have management VLAN ID 1, VLAN tagging untagged, untagged VLAN ID 1, connection DHCP, DNS dynamic.
With all my switches (LGS318P, LGS308P, LGS308), I have VLAN1 as default and VLAN2 as static.
I originally thought the WAP's LAN settings needed to have VLAN tagging set to tagged. However, when I do this, even the primary VAP won't connect.
Can someone help me out here? I've heard VLAN's are tricky, but didn't realize it would be this tricky. I want to isolate the guest WiFi network from my own network. Basically I just want the guest WiFi network to be able to access the internet and nothing on the intranet (I may allow printing later, but not right now).
Thanks for any help you can provide!

Sorry I don't have access to something to make a diagram right now, but here's how it looks:
LRT214 router connects to an LGS318P switch through ports 1 and 2 going to 17/18 on the switch (through link aggregation). Port 3 goes to my office and connects to an LGS308P.
The office LGS308P connects to an LAPAC1750PRO WAP, iMac computer, AT&T 3G MicroCell, Ooma Telo, and a Netgear GS105Ev2 switch (Brother MFC-9970CDW printer, Dymo Printserver, and occasionally my MacBook Air are connected to this switch). The LGS308P connects to the LAN via port 1. Ports 2 and 3 are for the WAP, but I don't have LAG enabled on the switch (yet).
The basement switch supplies:
1. Master bedroom (AppleTV currently, but soon to be LGS308P with another WAP)
2. Living room LGS308P (which connects):
a. LAPAC1750PRO WAP
b. TiVo Roamio
c. Apple TV
d. Samsung Blu-ray DVD player
3. Office second switch (LGS308)
a. Sonos Play:3
b. Sonos Play:3
c. Sonos Sub
4. ADT iHub
5. Synology DS212+ DiskStation
6. Sonos Connect:amp
7. LAPAC1750PRO WAP (2 ports reserved, but only 1 being used)
8. Empty runs to various rooms of the house that aren't yet connected)
All switches have STP (standard, modified) enabled. The LGS318P has root priority (4096), office LGS308 second (8192), and the others varying degrees of priority but none of the others have Sonos equipment connected. BDPU is set to flooding, port priority is 4 for gigabit connections and 10 for 100 Mbps connections (I've had to manually set these to 10 as they default to 19 and Sonos requires 10 to work).
Thanks for your help. Hopefully this helps.

VLAN help SG300

I've successfully setup a VLAN but....
From 192.168.1.x I can ping everything on 192.168.50.x
Inside of VLAN 50 ports 5&6 both the laptop and the nas server can talk to 192.168.50.1.
From 192.168.1.x I can access all of the 192.168.50.1 resources.
Inside VLAN 50 I can ping 192.168.50.1 but cannot access anything else inside the VLAN or out.
From the laptop 192.168.50.100 I cannot ping 192.168.50.50 (NAS) but I can ping the 192.168.50.1 gateway. I cannot ping any internet addresses.
New guy learning VLANS here. Any ideas why this is happening?

Hello,
Im glad that you were able to get it to work.
In regards to your questions:
1- How do I benefit doing this layer 2 as you suggest as opposed to doing it layer 3? It depends on your configuration, the switch, even on layer 3 won't do NAT so it won't be able to take PC's out to the internet, which means that you have to do a lo more configuration than if you just use a router and the switches on layer 2.
2- My understanding is that layer 3 is more efficient than layer 2 unless that is wrong. I don't know. Again, this is not a "One size fits all" type of configuration, depending on the amount of traffic, you may want to keep the local traffic restricted to the switch, which usually is more powerful than the router and just send the internet traffic (more lightweight) to the router.
3-If I was using a 3rd party firewall that doesn't have the Inter VLAN setting and does not support VLANS wouldn't I be suck going layer 3 to make all of this work? Yes, if you have a router that is not VLAN capable, then you will definitely have to configure your switch on layer 3 to route the VLANS and only use the router as your Gateway to the internet.
I hope this was helpful.
Please remember to mark an answer as correct if it was helpful to you so that other members can benefit from it.

WRVS4400N VLAN Configuration

I've got a WRVS4400N small business router and need to configure it so that the WAN has internet access but the LAN does not. I've tried messing around with VLAN and internet access policy settings, but it would require that I have the MAC addresses for every machine I want to block from the internet. Is there any way I can configure to router to provide IP addresses to the devices on LAN but block internet access?

On the same page in Internet Access Policy where you put MAC addresses to filter, you can specify the range of IP addresses instead. Then you can configure the schedule to be blocking Everyday for 24 Hours a day.

WRVS4400N VLAN trunking question

Hi all,
I just got a SRW224G4 today my main objective is to trunk 30 VLAN(s) to my WRVS4400N for interVLAN communication. So far I set G1 on my SRW as a trunk port and linked it to port 2 on my WRVS4400N (which is also set as a trunk).
So far no good when I go into LAN settings I do not see an option wheree I can set DHCP addresses or gateways for these VLAN(s). Is this even possible with the WRVS4400N I meen if Linksys is going to provide a small business solution atleast their equipment should support VLAN trunking with each other.
If anybody knows the solution to this please let me know.
Cheers

From what I know, although the WRVS4400N has support for port based VLAN setup, it does not give you the option to set different DHCP addresses for each of the 4 VLANS.

VLAN Help!!! Please

Hello,
I have 2 cisco 3550 switches. I have 2 vlans, VLAn1 & VLAN3. I have 3 ports on vlan 3 & all others on vlan 1. I need to grant access to 2 ports that currently are on vlan1 access to vlan 3. In essence, I need to know the CLI commands to grant 3 ports access to vlan 1 & vlan 3. Can someone help me. Thanks in advance.

First, you need inter-VLAN connectivity (routing). You would typically do this by creating Switched Virtual Interfaces (SVIs) on one of the 3550's. If you want to restrict access between the VLANs then you could apply access-lists to the SVIs.
int vlan 1
ip add 192.168.1.1 255.255.255.0
no shut
int vlan 3
ip add 192.168.2.1 255.255.255.0
no shut

WRVS4400n VLAN on the wanside

Hi,
Been trying to figure out howto create VLAN's on the WAN port of the WRVS4400n. Is this even possible with the factory firmware?

Dear Ankur
thanks for your attention
I do according to what you say.it means that I upgrade the ios to c1700-sy7-mz.123-14.T3.bin (ip plus feature) ios ,but unfortunately i could not set vlan on subinteface ,i config like this:
#conf t
#int fa0.3
#encap ?
%unrecognized command
could you pls tell me?
thanks

RV220W - VLAN help required

Hi,
I am having an issue with a new vlan on this router. The router is using the default firmware 1.0.0.26 as I cannot use 1.0.1.0 as we have a DSL connection which required PPPoE.
VLAN1 is for the our work PC's and our SBS which also acts as the DHCP server. The router is set with a static address and has the DHCP disabled.
VLAN5 is for a group of PC's which are only to have access to the Internet and nothing else on the network. I have done some screenshots of the settings.
When I connect a PC to port 4, a valid IP is not recieved from the DHCP set up for VLAN5, instead the PC recieves an IP address from SBS which is on VLAN1, it also shows that I am connected to the local domain on VLAN1. Am I missing something, is there anything else which needs settings. I can't figure out why I am not getting a 192.168.5.0 address.
My wireless secure VLAN10 works fine, and recieves the correct IP address.
Any help would be appreciated.
Michael.

Michael,
Well have been reviewing your posts and also set similar configuration in our lab. Note that i did have some trouble; no trouble with the RV220W but rather the switch was shutting down one of the connected ports to RV220W. So i went into SG-302 switch and disabled STP on that port and everything started working fine. So, this is most likely similar in your case as well. Also if the netgear is a fully managed switch why don't you just truck both vlan's on the same port. This will free up two ports in your network. you mentioned that you were getting an ip address from vlan 1 when you were connected to vlan 10, even with your configuration file i did not experience anything like this. On the wireless side you might want to reconnect to each SSID and test. When testing you want to make sure you do a (ipconfig /release) and (ipconfig /renew) your IP stack might be keeping settings from your pervious connected network.
Thanks,
Jason Bryant
Cisco Support Engineer
.:|:.:|:.

Voice VLAN Help Please

My customer has 2 SG300-52P and 5 SG300-28P. We installed a VoIP phone system earlier this year. At the time of install we placed the phone system on the native VLAN 1. Now they want to move the phone system to a new VLAN because their class C subnet is running out of addresses. DHCP is handled by their Active Directory and their router/firewall is an Untangle Box. The SG300 switches have a basic configuration only.
To move the phone system to a new VLAN I created VLAN 20 on every switch. I then turned Auto Voice VLAN on. I have every port on every switch set to trunk. Computers are plugged into back of phones. I then created a virtual interface on the Untangle Box for VLAN 20. The Untangle Box is also handling DHCP for the new VLAN. Active Directory is still handling DHCP for native VLAN.
From each switch I can ping the gateway of the new VLAN. From each computer I can ping the gateway and the phone system on the new VLAN. However, the phones will not grab an address on the VLAN and when they are set to static, they cannot communicate with other devices on the VLAN.
Any help would be highly appreciated. I am not sure what I am overlooking.

Here is an example of part of a working switch config with Zultys phones where voice VLAN is 100 and data VLAN is 10:
vlan database
vlan 10,20,100
exit
voice vlan id 100
interface fastethernet1
description "RCP and Voice"
switchport trunk allowed vlan add 100
switchport trunk native vlan 10
interface fastethernet2
description "RCP and Voice"
switchport trunk allowed vlan add 100
switchport trunk native vlan 10
In your case you need a trunk port with VLAN 20 tagged on your firewall (or an access port to a separate physical port on VLAN 20. The default gateway served to the phone (or put there statically) should be the interface on the IP. Then you may also want to allow inter-vlan routing for admin access or MXIE if you are using it.
One thing to note on Zultys is by default I think the device profile disables LLDP, but on the phones it is enabled out of the box. So the first time a phone downloads its config from the Zultys it may turn of LLDP unless you checked the box to keep it on.

WRVS4400n VLAN Help

Similar Messages

Maybe you are looking for