VI. Feature Setup
ExpiredHow to configure VLAN routing on a VigorSwitch
A DrayTek VigorSwitch provides connectivity for multiple network segments with 802.1Q VLAN tags, which separate networks at Layer 2 (MAC level). In a typical network that uses Layer 2 VLAN tags, the router provides the routing between VLANs, which can limit throughput between VLANs to the router's Firewall throughput, instead of the 1Gbps link speed.
The VigorSwitch P2280x and G2280x switches can be used to perform routing between separate networks at Layer 3 (IP level) for higher performance.
This guide demonstrates how to configure the VigorSwitch to provide fast routing between separate networks.
1. Create your VLAN's with the usual Trunk port, and tags.
In the following example we use port 3 on the router as a trunk.
2. Create the LANs to accommodate your network's needs.
We will be using just 2 subnets for this routing example, LAN2, and LAN3.
The LAN DHCP Gateway configuration must be set to use the Switch's VLAN Routing interface address, which will be configured later in this setup process.
For reference, the "192.168.111.1" address will be configured as the VigorSwitch's VLAN Routing gateway IP.
LAN Clients are directed to this address using the DHCP server, which will allow traffic to be routed through the VigorSwitch.
3. Create the VLAN's on the switch, under Switch LAN>> VLAN Management>> Create VLAN
The Switch has port 1 configured as a "Hybrid Port", that connects to port 3 on the Router.
Ports 4, and 5 of the switch were configured as "Access Ports", one on the "Voice" VLAN and one on the "Data" VLAN, for initial set up and testing of VLAN Routing.
4. Enable routing under VLAN Routing>> Properties>> Global settings
5. Create the interfaces on the switch for each VLAN
The Interface IP addresses need to be configured as suggested in step 2, these must not conflict with the router's LAN address.
These IP addresses will be used by the VigorSwitch for the purpose of IP Routing. The Subnet Mask should be the same as the subnet mask configured on the router for each of the LAN subnets.
6. Create a Default Route for traffic that doesn't match either of the 2 subnets
In the VLAN Routing>> Static Route section, add a new static route to use the Router's IP as the Default Route.
- Action: Add
- Destination IP Address: Tick "Default"
- Subnet Mask: This is greyed out when the "Default" option is selected
- Next Hop: Gateway
- Gateway IP Address: Specify the IP address of the Router.
Click Apply to create the Static Route, which will take effect immediately.
This sends traffic outside of the LAN(s) to the router, and ultimately out to the internet. If the default route is not set, there will be no traffic going out on the internet.
It is very important that the Gateway of the Default Route points to one of the Router's interfaces.
Controlling Routed Traffic
Since the router is not involved in the traffic that is routed between the Local LANs, the router's Firewall Filter Rules will not apply for this type of traffic.
Configure the Access Control List of the VigorSwitch to control traffic between the LAN subnets instead.
Troubleshooting
Use ICMP (Ping) to test the connectivity, and check the TCP settings as well.
Pinging a host on Data VLAN, comes back successful, with minimum of latency.
- First Published: 24/09/2019
- Last Updated: 22/04/2021