I am just trying to understand vlans.
In my home I have a wireless mesh network which lots of things connect to.I have a lot of IoT devices (lights and more recently a washing machine) and non IoT (my Laptop, Phone
and iPad for instance). This is a Linksys Velop system set to Bridge Mode and even though its in that mode the various nodes (ie separate Linksys boxes) all have ip addresses allocated by me via a DHCP server which can see their MAC Addresses. The DHCP Server is also the DNS server and is dnsmasq run on a raspberry pi (so its not the Router!)
My Router (TPlink EG605) and a switch I just bought (TPLink SG605E) have VLAN support. I can see no mention of PVID in the router, although the switch does. I’m at my limit of understanding of VLANs at this point by I believe a PVID allows you to add a vlan tag to incoming ethernet frames without them, whilst I thing the VLAN can be tagged or untagged on a port by port basis. Tag ads the vlan tag and Untagged strips it from outgoing ethernet frames.
So if I can pick up the MAC address of all my IoT devices on the DHCP Server and allocate them to a different subnet and then packets from them and from my standard devices devices will arrive at the Switch or Router (dependant on which port the cable from the main wireless Mesh controller arrives at) un-tagged but in the same cable.
Can I split them into different VLANs at this switch/router and prevent the IoT devices doing anything other than go over the WAN to the internet? (I wish they didn’t but all these product owners seem to only provide portals to them in the cloud). In the router, when you create a VLAN you do so with a sub-net, whereas in the switch I haven’t found a way to do that. Does that mean I have to plug this cable into the Router or doesn’t it matter (ie the router tells the switch about the vlans)?
I have a similar situation with Camera’s, except they have their own wireless hub and I just have a cable from it. I don’t allocate IP addresses to the cameras, just to the hub. I want to put that in the same IOT sub-net, although will arrive at its dedicated own port via an Ethernet cable.
I have a lot of questions embedded within. Can someone give me answers?
Thanks
