I'm installing the network in an office building that will be used as co-working space by multiple smaller companies.
Since I was hoping to isolate traffic from the different companies I purchased hardware which (supposedly) has VLAN support:
- TP-Link ER-5120 broadband router
- TP-Link TL-SG3424 L2 switch
- Linksys LAPAC 1750 802.11AC access points
The creation of company SSIDs on the Linksys and assigning them to VLAN IDs created on the L2 switch works fine. However, clients in this VLAN don't get an IP address from the router. The router doesn't know how to handle the VLANs.
The ER-5120 apparently has port-based VLAN support but does that mean it can't trunk the VLANs over a single cable? I only have 4 LAN ports on the router which is not enough for the number of VLANs that I need.
According to this doc on the TP-Link website I need to include a managed L3 switch, which (from TP-Link) costs more than all the equipment I already purchased 🙁
My question is whether I'm overlooking something. And if I really need an L3 switch for this configuration, could I also use a much cheaper model like HP's 1920 8-port L3 switch, or the Edgeswitch Lite from Ubiquity?
Best Answer
That router, apparently, only does port based VLANs, not 802.1Q trunks. You either need a different router which can do 802.1Q trunks, or you need to get a layer-3 switch which can connect to this router via a point-to-point routed link. You are trying to use the equipment you have in a way it wasn't designed to be used.
You don't really give all the specifications for what you are trying to do. A layer-3 switch could work; you could get a router that supports trunking; you could get a router with enough ports, etc. You need to decide how you want to design the network, first, then buy equipment which supports your design. It seems you did that backwards (using the wrong tools for the job; don't use a screwdriver to drive nails).
EDIT based on your comment:
A layer-3 switch as a distribution switch is certainly a viable solution. You can set it up to trunk the correct VLANs to the various access switches. The VLANs defined in the Layer-3 switch will have the gateway addresses for the VLANs, and, probably, a static route to the WAN router. You should set up a point-to-point routed link between the layer-3 switch and the WAN router. If the WAN router is the DHCP server, you will need to set up a relay for that on the layer-3 switch for each of the VLANs using DHCP.