Help to config EX-2028P as an IP routing

Products cnMatrix
1

Hi everyone,

I have a system as follows:

- 01 router 02 wan port and 01 lan port;

- 01 switch EX-2028P uplink to router via port 07/24;

- 04 set of wifi-6 XV2-2 (port 03/24, 05/24, 09/24, and 11/24) with two separate SSIDs configured to operate on VLAN10 and VLAN20.

- 06 set of IP camera (port 18/24 – 23/24) & 01 NVR (port 17/24), which operates on VLAN30.

- Management Vlan99 as an naitive Vlan.

I need to configure the system so that the switch operate as an internal Layer 3 routing, while the router is used only for WAN access (internet gateway).

Please help me the configuration (VLAN, IP routing, gateway, DHCP setup, etc.) for this topology.

Thankyou!

Trung Nguyen (Mr.)

2

Hi Trung,

Have you had the switch configuration working?

For the switch to do inter-vlan routing, each vlan must have ip address and must be enabled as shown below. Devices connected behind each VLAN must have their gateway to be configured as the ip address of their respective VLAN.

interface vlan 30

no ip address

ip address 30.30.30.1 255.255.255.0

no shut
3

Hi Tam,

I think, my switch is working normally. I can change some parameters through cnMaestro.

I have configured my entire router to operate as a DHCP server with four VLANs as follows:

  • VLAN10: 172.168.10.1/24, pool size 100, starting from 172.168.10.10

  • VLAN20: 172.168.20.1/24, pool size 100, starting from 172.168.20.10

  • VLAN30: 172.168.30.1/24, pool size 50, starting from 172.168.30.10

  • VLAN99: 172.168.99.1/24, pool size 10, starting from 172.168.99.10

The router is connected to the EX-2028P via LAN3 port.
On the switch, port Gi0/1 is configured as a trunk port (VLANs 10, 20, and 30 are tagged, and VLAN99 is untagged).

I would like the EX-2028P to operate in Layer 2 mode.
Please guide me on how to configure it through cnMaestro so that the system works perfectly.

Thank you!

4

Hi, @Nguyen_Ho_Quang_Trun

We will definitely assist you with this. Please, could you create a support ticket by sending an email to support@cambiumnetworks.com and share the ticket number here for reference?

5

Yes, this is a reasonable setup if you want the EX-2028P to handle the internal routing and keep the router mainly for WAN access. I’d create SVIs on the switch for VLAN 10, 20, 30 and 99, with the switch SVI address used as the default gateway for each VLAN. For example, VLAN 10 could use 192.168.10.1/24, VLAN 20 192.168.20.1/24, VLAN 30 192.168.30.1/24 and management VLAN 99 192.168.99.1/24. The AP ports should carry the required tagged VLANs, while the camera/NVR ports can be access ports in VLAN 30. DHCP can also run on the switch for the client VLANs, with the router providing the upstream/default route. The switch then needs a default route pointing to the router, and the router needs a route back to the VLAN 10/20/30/99 networks via the switch’s transit IP. The exact commands depend on the EX-2028P firmware and whether you’re managing it through cnMaestro, so I wouldn’t copy a generic Cisco-style configuration without checking the Cambium syntax first. The important part is getting the VLAN interfaces, inter-VLAN routing, DHCP scopes and the return routes on the WAN router aligned.