How to configure network segments on a TP-Link core switch

To configure network segments on a TP-Link core switch, create VLANs, assign ports as access or trunk, set PVIDs for untagged devices, and configure inter-VLAN routing if needed.

Step 1: Access the Switch Management Interface

Connect your computer to the switch via Ethernet and open a web browser. Enter the switch's IP address (commonly 192.168.0.1 or 192.168.1.1) and log in using the administrator credentials (default is usually "admin"/"admin"), . Change the default password for security.

Step 2: Create VLANs

Navigate to the VLAN configuration section (often under L2 Features → VLAN → 802.1Q VLAN → VLAN Config) and create the VLANs you need. You can create multiple VLANs in a batch using commands like vlan 10-19 for contiguous VLANs or vlan 2-9,20,30 for discrete VLANs . Assign each VLAN a unique ID.

Step 3: Assign Ports to VLANs

• Access Ports: For devices that are not VLAN-aware (PCs, printers), assign the port as untagged in the VLAN and set the PVID to the VLAN ID . This ensures the device communicates only within that VLAN.
• Trunk/Tagged Ports: For VLAN-aware devices (firewalls, other switches, APs), assign the port as tagged for the VLANs it should carry. Tagged ports preserve VLAN tags on packets .
• General/Hybrid Ports: Some TP-Link switches support a general mode that allows multiple VLANs with flexible tagging rules .

Step 4: Configure Inter-VLAN Communication (Optional)

If your core switch supports routing:

1. Create VLAN interfaces and assign IP addresses to each VLAN .
2. Set the default gateway of devices in each VLAN to the IP of their VLAN interface.
3. Enable static routes or a dynamic routing protocol (like RIP) to allow communication between VLANs .

Step 5: Configure Management VLAN (Optional)

For security, you can create a management VLAN to restrict access to the switch GUI. Only devices in this VLAN can access the management interface . Configure an IP-based ACL to allow HTTP/HTTPS access from authorized hosts.

Step 6: Verify Configuration

• Use the show interface switchport command to check port types and PVIDs .
• Test connectivity by connecting devices to different VLANs and verifying access restrictions and inter-VLAN routing.

Step 7: Save Configuration

After completing the setup, save the configuration to ensure it persists after a reboot. By following these steps, you can effectively segment your network on a TP-Link core switch, improving security, traffic management, and network organization .