Can ordinary routers support cross VLAN Internet access 5?

No, broadband routers do not support VLAN division, and they certainly do not support VLAN communication.

Some enterprise-level broadband routers support VLAN partitioning, which means that the IP address of each VLAN must be configured on the router.

Serves as the default gateway for the VLAN.

In addition, the corresponding interface connections should be assigned to the corresponding VLAN, DHCP service should be enabled, and different network segments should be configured for each VLAN.

IP address pool, so that each interface connected to a different computer can obtain the IP address of the VLAN;

Common routers do not support inter-VLAN access because they do not support sub-interfaces, which must be configured from the command line.

Wireless routers are relatively easy to use, and wifi can also be used.

You can use single-arm routing to encapsulate the interface of the switch to the router by changing it to a trunk port. Do not configure the physical interface of the router, just no shutdown.

Then, several sub-interfaces (depending on the number of VLANs to be interconnected) are encapsulated, and cross-VLAN mutual access can be realized in the network segment of the corresponding VLAN from the address.

The connection should be:

Internet - Aitai's 2620 Dual-Wire Router - H3C S3600 Switch - PC

Router (S3600 switch.)

-vlan100---pc

-vlan200---pc

-vlan300---pc

Add routes to the S3600 switch.

ip route-static router) preference 60

Basically, it's fine.

Yes, if you want to divide a VLAN, you need to use a router, there are many types of routers, now assume that the router has multiple Ethernet interfaces, just we can divide the VLAN according to the physical interface. If the router has only one Ethernet interface, then we need to set up the single-arm router, detailed steps:

2. Turn on the corresponding port of the router.

3. Set the IP address for the corresponding port of the router. In the future, this IP will be used as the gateway of the computer under the jurisdiction of this port, and the computer under its jurisdiction will be treated as a VLAN.

4. Set the IP and gateway information for each host, and test whether it is connected to the server.

The function of a router to divide a VLAN is to enable a physical port of a router to connect to two or more network segments.

For example, a router has only one port for terminal connection (of course, this kind of boring situation is basically impossible to happen, but to simplify the example), this port is assigned an address. However, since the company has two departments, a sales department and a planning department, each department requires a separate subnet with a separate server.

You can create two sub-interfaces under this physical port --- implement logical interfaces. For example, the logical interface F0 assigns an IP address for the sales department, while F0 assigns an IP address for the planning department. This is equivalent to using one physical port to achieve the function of staring at two logical interfaces.

This expands the situation that can only be divided into one network segment to the situation where two or more network segments can be divided. Because these network segments are created under logical interfaces, they are called virtual LAN VLANs. This is the purpose of VLAN elaborated by Ant Yun at the router level.

VLAN refers to the Layer 2 hand-to-hand roll-and-destroy replacement technology.

The function of the router to divide the virtual LAN is to be able to divide the network into multiple broadcast domains, when dividing the broadcast domain, the router must generally be used, and after using the router, the broadcast domain can be divided by the network interface on the router.

However, usually there are not many network interfaces on the router, and the number of them is mostly around 1 to 4. With the popularity of broadband connections, broadband routers have become more common, but it should be noted that although they have multiple network interfaces on the LAN side, they are actually built-in switches in the router and cannot divide the broadcast domain. In addition, if a router is used to split the broadcast domain, the number of segments that can be split depends entirely on the number of network interfaces of the router, so that the user cannot freely split the broadcast domain according to the actual needs.

Compared with routers, Layer 2 switches generally have multiple network interfaces. If Bi Chong can use it to divide the broadcast domain, then there is no doubt that the flexibility of use will be greatly improved. The technology used to split broadcast domains on Layer 2 switches is VLANs.

By using the Layer 2 switch technology, we can freely design the composition of the broadcast domain and improve the freedom of network design.

The router is a hardware device, which belongs to the ISO Layer 3 network layer device, which is responsible for traffic control, routing table control, and route direction finding.

VLAN is a software virtualization, which is generally done by ISO Layer 2 and the data link layer, that is, the switch, but VLAN belongs to Layer 3, which is not very sure, and I have forgotten the theory I learned ten years ago. VLAN is a virtual local area network, that is, a large broadcast domain is re-virtualized into multiple and small broadcast domains, for the purpose of security and easy management and separation of broadcast traffic. For example, more than a dozen switches are connected, and thousands of hosts are connected at the same time, as long as a computer is infected with a network virus in such a large broadcast domain, the entire network will be hung up, and it is difficult to achieve broadcast and multicast traffic including IP distribution, and different departments are on the same network, security is also a problem, but the VLAN function of the switch divides different departments into different VLANs, and different VLANs are equivalent to different networks, so that they are not in the same broadcast domain, and the broadcast multicast traffic is separated. Different VLANs can not make functions and policies respectively, easy to manage, different VLANs can not access each other, but also safe, VLAN access needs to be routed or Layer 3 switch routing table to access each other, sharing is not available, so is the role and benefits of VLAN.

The router has two Ethernet ports connected to different VLANs, and this is not duplicated.

The router is not divided into two VLANs

Instead, two configurable ports are connected to the two VLANs of the switch, and the addresses of the two interfaces of the router are the gateway addresses of the hosts in the two VLANs, so that the VLANs can access each other and other networks connected to the router (such as the Internet).

I don't know if your switch is a Layer 3 switch, in addition to dividing the VLAN, can it configure the VLAN address and route, if so, then the router can only connect an interface to any VLAN of the switch, the gateway of the host of the VLAN is set to the VLAN address configured by the switch, and the default route is set in the switch, and the next hop address is the interface address of the router.

Note that when a router is connected to a VLAN of a switch, its interface must be configured with an address that matches the VLAN to communicate with other hosts in the VLAN.

The above is for reference. If you have a question, please m me.

It is possible to communicate, the port that the router is connected to the switch is equipped with an IP address, and the switch VLAN is equipped with an IP address. And all in the same network segment. It's completely interoperable. Don't forget to add the port to the VLAN that you connect to the router.

Endpoint isolation.

Mobile terminals connected to the same SSID are isolated from each other, and the configuration is as follows:

Service and management VLAN isolation.

If the IP address obtained by the connection SSID and the management IP address of the AP are in different VLANs, you can label the SSID with a VLAN as needed.

Service VLAN isolation.

Multiple SSIDs of an AP correspond to different VLANs, for example, the wireless network is divided into office network and guest network.

Extend VLAN isolation.

The wired network port of the panel AP supports VLAN tags to isolate the VLAN of wired services and wireless services.