I recently bought a Cisco SG300 switch in order to separate Windows clients in my home network. Ideally, all clients remain in the same IP-subnet but I want each one to be in a separate VLAN. Yet each client should have access to shared devices like printer, NAS. Is it possible to have those shared devices in multiple VLANs?
I know that I can make the switch a layer-3 switch, put the shared devices in its own VLAN, and add routing to achieve the same objective, but I'm afraid that this does not work with media (DLNA) clients that broadcast to discover the media (DLNA) server.
I got another question regarding the above private VLAN setup? I want to use 802.1X network access control. If I understand correctly - and I'm just learning this stuff from the ground up, so bear with me - I can authenticate the shared devices (printer, NAS) via
- Radius MAC-based authentication (switch port authentication mode: 802.1x Authentication)
- direct MAC-based authentication mode on the port
It all depends what do you need on your network. However if you would like to play around than try to set up private vlan concept using PVID, tag and untagged VLAN and port in general mode. Those settings give a great opportunity to create network as you wish.
For port authentication I believe Radius authentication it is a greater enhancement since you might you DVA (Dynamic VLAN Assignment) and some other attributes which can be sent from the server as a configuration parameters. Imagine user which is moving between the ports even switches and after successful authentication gets always assigned to the same VLAN :-)
Article ID:4006 Configure Secure Shell (SSH) Server Authentication
Settings on a Switch Objective Secure Shell (SSH) is a protocol that
provides a secure remote connection to specific network devices. This
connection provides functionality that is similar...
Article ID:4982 Access an SMB Switch CLI using SSH or Telnet Objective
The Cisco Small Business Managed Switches can be remotely accessed and
configured through the Command Line Interface (CLI). Accessing the CLI
allows commands to be entered in a termina...
Article ID:5735 Convert Configuration Files using the Configuration
Migration Tool on Cisco Small Business Switches Introduction The Cisco
Configuration Migration Tool allows you to convert configuration files
from previous generation of Cisco Small Busin...