VLAN Configuration Question

aschafer

Honorable
Sep 17, 2013
1
0
10,510
Hi, I have a network that consists of 3 VLANs
1 = Desktops and Laptops
50 = IP Cameras
200 = Servers

Just to make this simple, treat all devices in a VLAN the same:
1 is a member of 200, as computers here need to talk to Servers
50 is a member of 200, as the IP Cameras stream to a NAS
200 is a member of 50, as the NAS controls attributes of the cameras
200 is a member of 1, as the servers and computers talk to each other

VLAN 1 <---------> VLAN 200 <---------> VLAN 50

All devices have an IP of 10.1.1.x (x is device dependent)

In this configuration, the primary goal of having IP Camera traffic not seen by the desktops and laptops in VLAN 1 is accomplished. However, when the NAS sends an ACK for the IP Camera traffic, and because it's port on the switch is for VLAN 200, devices on VLAN 1 (bad) and VLAN 50 (good) are seeing them.

How can I get traffic from VLAN 200 devices to route to the VLAN they are intended for?

I'm hoping for a solution that doesn't require a dedicated router and my switch is a Netgear GS108T, but if necessary upgrading a step to something like a Netgear M4100 or even to an Enterprise class switch is not an issue - I am just looking for the best configuration right now.
 
Solution
the m4100 can do it but you have to have different subnets for each vlan.

Just be lazy and use 10.1.x.0/24 for each vlan. You then make the switch be 10.1.x.1 for all the vlans. This will make it all route together but you will need to put in a filter for anything you want to prevent
the m4100 can do it but you have to have different subnets for each vlan.

Just be lazy and use 10.1.x.0/24 for each vlan. You then make the switch be 10.1.x.1 for all the vlans. This will make it all route together but you will need to put in a filter for anything you want to prevent
 
Solution