[INFO] - VLANs

[Sbu051995]

Good morning y'all I have a question for you...

If I have VLANs set up on say a UniFI system so with a USG pro and a 48 port switch and I have my vmware hosts for example on one vlan and the rest of the office on another are all the packets gonna go through the gateway gumming it up or is it a bit smarter then that and is gonna go through the switch?

 

Thanks!

 

Fabio

[Oshino Shinobu]

VLANs are managed at layer 2, so they will go through the switch, provided the traffic is local.

[Acedia]

If you have two seperate VLANs and they only meet at the gateway it's gonna go through the gateway.

[Lurick]

Communication within the same VLAN will stay on the switch but any communication between VLANs needs an L3 interface (SVI) on the switch or some form of link to the router to act as the gateway be it a router on a stick, link per VLAN, etc. to allow that inter-vlan communication

[Sbu051995]

Ok so if in my example I just have the switch divided in VLANs so I assigned every port to the desired VLAN will the packets go to the gateway? With UNIFI the VLANs are provisioned also to the switches so... will this work?

Or would I need to do something special on the switches to allow this inter-vlan traffic?

 

Thanks for the answers btw!

[Lurick]

12 minutes ago, Sbu051995 said:

Ok so if in my example I just have the switch divided in VLANs so I assigned every port to the desired VLAN will the packets go to the gateway? With UNIFI the VLANs are provisioned also to the switches so... will this work?

Or would I need to do something special on the switches to allow this inter-vlan traffic?

 

Thanks for the answers btw!

What's the model of the switch? If it's not a Layer 3 capable switch then everything for inter-vlan traffic will need to go through the router. If the switch is Layer 3 capable then you configure the gateway for the VLANs on the switch itself and only traffic that needs to go out of the local network will hit the router.

[Acedia]

8 hours ago, Sbu051995 said:

Ok so if in my example I just have the switch divided in VLANs so I assigned every port to the desired VLAN will the packets go to the gateway? With UNIFI the VLANs are provisioned also to the switches so... will this work?

Or would I need to do something special on the switches to allow this inter-vlan traffic?

 

Thanks for the answers btw!

If you don't want the VLANs to pass an additional appliance like a firewall or security appliance why have seperate VLANs in the first place?

[Sbu051995]

I want separate VLANs to have a more organized network because as of right now it's all mised with everything... office PCs, wifi clients, workshop appliances... the lot...

I don't need everything to go through the gateway because for example I want my VMs running on a different VLAN then my office and have the switch manage the inter vlan traffic as the switch has a much higher switching capacity then a gateway... I have a 10Gbps uplink to the hosts and I don't want our big files to route through the firewall...

I just want VLANs to organize network devices...

I want to use ubiquiti gear so I guess that because of the Layer thing I need to go fr the EdgeSwitch and not the UniFi gear that doesn't support l3 routing right?