Hi guys !

First of all, sorry but my english skills are a little bad.
So, i buy this week an switch RB260GS (CSS106-5G-1S) because i need to create an VLAN to pull apart my multimedia traffic.
My router can't create VLANs at layer 2-3 (don´t have that funcionality) and i want to make it on the switch at layer 2.

The scenery is something like this:

- Router (192.168.1.1) >>>> RB260GS
- RB260GS >>>>> Native VLAN 1 for my PCs, Laptop, Mobiles....
>>>>> VLAN 20 for NAS, TVs, etc



Thanks, and sorry for the grammar mistakes

Anyone can help me?
Thanks

You did not tell where you hit the problem ... is it conceptual (e.g. how to make router see different VLANs so that it can treat traffic differently) or is it about implementation (e.g. you don't know which check boxes need to be checked).

Hi mkx, thanks for your answer.

Indeed, my problem is about implementation, i try this config:

Port1 - Trunk port (to router) - VLAN1
Port2 - VLAN1
Ports 3-4-5 - VLAN20

So, when i create the VLAN20 and assign to ports 3-4-5 i try various configurations on that ports (leave as is, always strip), port1 remains not a member.
But when i check the connectivity, i cannot see the 192.168.1.1 (router) from 3-4-5.
I try too to put strict on VLAN tab to ports 3-4-5 with same results.

Here you can see 2 screenshots about VLAN/VLANS tabs. Forgot the configuration now applied, i try a lot of combinations

Hope anyone can help, thanks

Did you stumble upon wiki example of configuring VLANs on CSS106? I believe it might give you some ideas ... I believe you should set ether3-5 as access ports for VLAN 20 (doesn't seem they are right now) ... and there might be further misconfigs.

viewtopic.php?f=13&t=143620

This doesn't apply to OP's case, CSS106 doesn't run RouterOS.

Finally i change the RB260gs for an Hex S routerboard and try with it.

Thanks

But that is conceptualy wrong.
You want to have different VLANs, but your router can't do it.

Therer is another simpler scenario and you do not need VLANs.
Use port isolation on the switch:
- go to ACL pane and configure
- from: 2, 3, 4, 5
- Redirect To: 1

And thats it. Port 1 is to the router. All is in one network and isolated.

This online course explains it easily.

https://mynetworktraining.com/courses/enrolled/820895

@bmann You are so right. If the router is not vlan aware what is the point.
To the OP, use the hex router to replace your current router vice using it as a managed switch LOL.