Need help configuring SG300-10 switch

[Justin Girard]

Hi

i bought an SG300-10 switch and started configuration.

i have some problem to configure it cause i am not realy used to networking.

what i have configured for now is the VLAN.

Vlan 2 - i will plug my router there for the internet access

Vlan10 - is for my server and pc in my office

Vlan 40 - is for the guest wifi.

i will use the switch in layer 3 mode and i want to configure a DHCP on the vlan 40 but im not quite sure how to do it.  I have enabled the DHCP and created a ip pool but how i assign it on the vlan 40 ? and how i configure everything to go out on internet ?. if i follow the base logic, i will put all my port member of the vlan 2, is that correct ?

Im new in the networking domain

thanks

[Tom Watts · Accepted solution]

Hi Justin, here is a couple examples-

Example 1-

This will apply an ACL to VLAN 1 where the 192.168.1.0 subnet will not communicate to 192.168.40.0 subnet. But the 192.168.40.0 subnet will communicate to 192.168.1.0 subnet.

ip access-list extended Test

deny ip 192.168.1.0 0.0.0.255 192.168.40.0 0.0.0.255

permit ip any any

interface vlan 1

service-acl input Test

Example 2-

This will apply an ACL to VLAN 40 where the 192.168.40.0 subnet will not  communicate to 192.168.1.0 subnet. But the 192.168.1.0 subnet will  communicate to 192.168.40.0 subnet.

ip access-list extended Test

deny ip 192.168.40.0 0.0.0.255 192.168.1.0 0.0.0.255

permit ip any any

interface vlan 40

service-acl input Test

-Tom
Please mark answered for helpful posts

[Justin Girard]

Great Tom !!

that doing what i want !!

just a little issue ( it's no terrible ) but your last command "service-acl input test ( or the name i gave to it ) does not work.

i have assigned the acl to the port 10 of the switch by the GUI ( where my guest wifi will plug in ) and that working.

but the subnet 192.168.1.0 cannot access 192.168.40.0. it's no a big issue, cause if i want to work on the access point i will plug the laptop on it and do what i have to do, but i would like to not have to go on th second floor and plug my laptop ( if you see what i mean )

otherwise you are a great teacher !!, i learned a lot of thing with this little discussion

thanks

[Tom Watts]

Hi Justin, you're welcome. Please also check out the small business blogs!

http://blogs.cisco.com/smallbusiness/

And more specifically about this switch model

http://blogs.cisco.com/smallbusiness/wow-i-had-no-idea-cisco-had-these-products/

-Tom
Please mark answered for helpful posts
http://blogs.cisco.com/smallbusiness/