The Fritzbox itself can already operate a second, independent network, the guest network can be enabled on certain ports of the router. This gives internet access but no access to the main LAN. If you want to operate multiple networks with access to each other, you need additional routers or switches with routing functions - found in professional level 3 switches as well as in some level 2 switches (L2+). It's not super easy though...
Display
Implementation
First things first: if you have another old Fritz box should have, you can also use these to get at least a little more than a guest network - we'll show you how here.
Now to the big picture: The center is supposed to be the omnipresent Fritzbox, usually referred to as a router, it is basically a combination of modem, router and switch - but let's leave it at routers, after all this is primarily about beginners, normal private households and the practical setup, not basic training for networkers.
Display
By default, the Fritzbox builds a network in the IP range 192.168.178.XXX on. The aim of this article is now to add another network in the area 10.0.0.XXX to build within which there is access to the Internet as well as to the standard network and vice versa.
This second network is called VLAN set up, i.e. as a virtual LAN. Professional or just very good (combi) routers can set up something like this directly, but the Fritzbox, as a rather limited private user device, cannot. Even the normal 10-euro switches cannot do this, since they are nothing more than distribution sockets. So a switch with routing functions is needed, which is attached to the Fritzbox and itself spans the VLANs. Different VLANs can be assigned to the individual ports of the switch, as can the standard network of the Fritzbox.
One more is missing Device: Here it should be a Raspberry Pi, which is about WLAN in the standard network (as 192.168.178.100) hangs and over LAN in the VLAN (as 10.0.0.100). But the operating system is more important: Ubuntu.
Of course, it would be nice to design everything from scratch, but this is about them normal initial situation: A Fritzbox is already running, now the network is to be expanded without having to adapt the existing network and its devices.
hardware and process
To Fritz box: A Fritzbox 6660 Cable is used here. Since only one standard feature is used on the Fritzbox itself, the model is irrelevant. And also with most other home routers the procedure works!
With the switch, it gets much more difficult. Here comes a Cisco SG250-08 for use, whereby the instructions naturally apply to all sizes of the SG250 series, regardless of whether they have 8 or 16 or even more ports. Other Cisco models can also be configured in the same way. but Attention: The Cisco boxes are damn complex, aren't really aimed at consumers and the documentation is sometimes cheeky - so you have to have an idea of network basics or be willing to deal with them. But there are devices from TP-Link, D-Link, Netgear & Co. that are significantly cheaper, also support VLANs and - tend to! – have slightly simpler web interfaces. An advantage of the SG250s: They are extremely widespread, are therefore well documented and offer a lot of potential for further work with networks. That principle procedure however, is always the same.
Cisco SG250-08 8-Port Gigabit Smart Switch (SG250-08-K9-EU) *
127,58 €
(* = affiliate link / image source: Amazon affiliate program)
Tools: You don't need any special tools. The configuration takes place in the web interfaces of Fritzbox and SG250-08 and of course on the Raspberry Pi - although the hardware doesn't really matter, it's much more about the operating system and that's where it comes from Ubuntu for use. The configuration takes over there network plan.
Requirement: Your client for testing should either already be connected to the standard network and via SSH be accessible or have their own screen, such as a laptop. It is also helpful if it has two network interfaces, i.e. LAN AND WLAN - so that it remains accessible even if the VLAN does not work ;)
But now finally to the procedure:
Recommended posts
Setting up FritzNAS: Everything you need to know
21 November 2022
Router Freedom: Set up your own FritzBox at NetCologne
15 June 2022
(Video) Cisco Switch basic Configuration | Cisco Switch Configuration Step by StepUbuntu: Configure network in the terminal – for beginners
14 March 2022
Fritzbox: Set up a second home network with an old box
23 January 2022
Monitor Philips Hue devices
21 December 2021
Build a wireless mini NAS with the Raspberry Pi
16 December 2021
(Video) VLANs and Trunks for Beginners - Part 1
- Set up switches
— Activate routing
— Configure VLAN
— Configure ports
— Configure IP interfaces
— Set up a static route - Configure routers
— Set up static route (for internet access in VLAN) - Set up clients
— Network configuration for LAN and WLAN via Netplan
You can of course configure a lot more, this is all about that Minimum, to get the whole thing up and running – no cosmetic surgery like naming ports or security settings.
setup switch
The installation of the switch itself is trivial: Connect any port to any Fritzbox port using a network cable, look up the IP of the switch in the Fritzbox interface and call it up in the browser – for example 192.168.178.61. Actually you should use IP addresses at the beginning/end of the address space for things like switches and routers, so the Fritzbox also has the 192.168.178.1 by default. and actually you should use a separate network to connect the router and switch and operate all devices directly on the switch. but inauthentic this is supposed to be about the reality of an existing Fritzbox network - and it set the 192.168.178.61 here in test mode and of course there are already a number of devices that are directly connected to the Fritzbox. If your it clean If you want to have one, you can of course also start from scratch.
Switch: Activate routing
First activate the routing under IP Configuration/IPv4 Management and Interface/IPv4 Interfaces, so it won't be forgotten later.
Switch: Configure VLAN
Now put a VLAN underneath VLAN Management/VLAN Settings to: You only need one for this ID (in the example 10) and any Namur set (testing in the example).
Switch: Map VLAN ports
Now you choose one Port, to belong to this new VLAN. You do that below VLAN Management/Port VLAN Membership via the button Join VLAN... Just select the port and add it to the new VLAN 10.
Switch: Configure IP interfaces
Of course, VLAN 10 also needs information about the network interface. Switch to it IP Configuration/IPv4 Management and Interface/IPv4 Interfaces. Adds over Add add an interface: As Interface you choose your new VLAN 10. Then you set IP address type on Static IP Address and forgive the one you want address of the switch in the VLAN, so here 10.0.0.1. the Network Mask comes up 255.255.255.0 – which means nothing else, that the first three blocks (192.168.178) are set for the subnet and then 253 (0 and 255 are reserved) addresses for end devices are available in the fourth block. It is a different one - the correct one! - Spelling of 192.168.178.XXX, which I sometimes use here for the sake of clarity. (You could alternatively use the PrefixLength set to 24, which means that the first 24 bits are a 1, i.e.: 11111111 11111111 11111111 00000000 corresponds to 255.255.255.000.) Whether my Xs or the usual zeros - they are just wildcards.
Means up to here: You have a VLAN 10 with an assigned port and an assigned network with the IP range 10.0.0.XXX – in which the switch appears as 10.0.0.1. The switch can still be reached on the other ports via 192.168.178.61.
Switch: Set default IP route
In the normal 192 network, the Fritz box provides access to the Internet – but the Fritz box is not yet known to the 10 network! So you put one first default route under IP Configuration/IPv4 Management and Interface/IPv4 Static Routes on. Two values are important here: Destination IP Prefix you sit up 0.0.0.0 and Next hop router IP address on the IP of the Fritzbox, that is 192.168.178.1 normally.
That means: everything (because 0.0.0.0 are four wildcards) is passed to the next hop forwarded, which here is synonymous with gateway or router - the gateway to the Internet.
Router: Set static IP route
Here now follows the other side: The Fritzbox must also first know how to deal with requests from the 10 network. So you also create a static route here, under Home network/network/network settings/static routing table/IPv4 routes: The Network is of course again 10.0.0.0 with the subnet mask 255.255.255.0 and the gateway is the connection point to the Fritzbox, i.e. the switch IP 192.168.178.61.
Configure Ubuntu
Last but not least, only the client has to be configured, in this example an Ubuntu on a Raspberry Pi. We already have in one how you work with Netplan under Ubuntu own article processed.
Attaches the computer to the port configured on the switch.
So here is the short version. You can either adapt the existing Netplan config or - better - create a new file that starts with a higher number, for example /etc/netplan/99-my-network.yaml, and could look like this:
network: ethernets: eth0: dhcp4: no addresses: - 10.0.0.100/24 gateway4: 10.0.0.1 nameservers: addresses: [8.8.8.8, 1.1.1.1] version: 2 wifis: wlan0: optional: true access-points: "mein-wlan": password: "meinpasswort" dhcp4: trueThe WLAN interface receives its configuration automatically via the Dynamic Host Configuration Protocol (DHCP) from the Fritzbox. the LAN interface however, gets the address 10.0.0.100/24 (where the 24 is again the network mask in the notation explained above.). as Gateway this time, of course, the Fritzbox is not specified, but the switch with its address in the 10-network, which you yourself above as 10.0.0.1 have determined.
To apply the new configuration:
sudo netplan generatesudo netplan applyMore on that in the above linked article.
Free Trial
You can then use ping to test access to other local networks and the Internet:
ping 10.0.0.1ping 192.168.178.1ping tutonaut.deIf that works, you can switch off the WLAN to test the new LAN interface in the 10 network on your own. This can be done, for example, with the tool ifconfig from net-tools:
sudo apt-get install net-toolssudo ifconfig wlan0 downAlso helpful: Start, stop and restart the network service:
sudo service systemd-networkd stopsudo service systemd-networkd startsudo service systemd-networkd restartNormal Ubuntu desktop versions do not run networkd but NetworkManager:
sudo systemctl stop network-managersudo systemctl start network-managersudo systemctl restart network-managerIncidentally, that's the nice thing about Netplan: When configuring, it doesn't matter which network service is actually running, Netplan simply passes it on to the right one.
By the way, you can display the local routing information with the net-tools program route:
routeenough - finally something simple ;)
Even if you have worked carefully: the chances are not bad that something still doesn't work. Netplan's YAML configuration is finicky, IP addresses quickly get transposed digits, sometimes it takes a few seconds for changes to take effect, network services are diverse and quickly configured ... Help for special cases is probably best found in German-speaking countries at Administrator.de.
Therefore, at the end, a quote from the Ubuntu Network Article: "Fatalist tip: If you're fumbling with the network, always have an extra device with internet access ready before you can't look up any more problems.” So, happy hacking.
(* = affiliate link / image source: Amazon affiliate program)
FAQs
Does Fritzbox support VLAN? ›
Different VLANs can be assigned to the individual ports of the switch, as can the standard network of the Fritzbox. One more is missing Device: Here it should be a Raspberry Pi, which is about WLAN in the standard network (as 192.168. 178.100) hangs and over LAN in the VLAN (as 10.0. 0.100).
Do you configure VLAN on router or switch? ›VLANs work on switches whereas to implement subnets you need a router. A routed network is more difficult to setup than a switched network. However a routed network does create separate broadcast domains while a switched network doesn't unles you use VLANs.
Can a router have 2 subnets? ›Most home routers aren't even capable of creating multiple subnets, but we will assume you have a really nice home router that can. Your router will only have 254 usable network addresses on a typical home network. Most routers have a network IP address of 192.168. 1.
Does subnetting require multiple routers? ›For Internet access everything needs to go through AT least 1 router - but very often only 1 router is required. When it comes to using switches, it would be typical to either have computers on different subnets on different switches, or to use VLANS to create multiple virtual switches on a single switch.
What does DECT mean on fritzbox? ›DECT stands for Digital Enhanced Cordless Telecommunications. It is based on a standard for cordless voice and data communications. The majority of our FRITZ! Boxes can function as DECT base stations.
Can you configure VLANs on a switch? ›Most switches have a means of defining a list of configured VLANs, and they must be added before they can be configured on any ports. The port to which the firewall running pfSense® software will be connected must be configured as a trunk port, tagging all possible VLANs on the interface.
Can a switch do VLAN? ›Switches can communicate with each other using VLAN trunking with VTP connections. The proprietary VLAN Trunk Protocol (VTP) allows individual switches to be efficiently managed as a group even though they are on different LAN segments. The protocol supports improved network performance and reduced administration.
Should I use VLAN or subnet? ›Why should I use vlans instead of subnets? VLANs cannot replace IP subnets. But they can structure your network - for scalability, resilience, security, or some other reason. Since hosts in different VLANs cannot talk to each other directly, you need to provide inter-VLAN routing.
Can a VLAN have 2 subnets? ›Single VLAN can support multiple subnets.
Can a switch handle two subnets? ›NETWORKING BASICS: TWO SUBNETS CANNOT TALK TO EACH OTHER UNLESS THEY'RE BOTH CONNECTED TO A ROUTER (OR A DEVICE HAVING ROUTING FUNCTIONALITIES, E.G. A LAYER 3 SWITCH). ONLY ROUTERS CONNECT TWO DIFFERENT SUBNETS, SWITCHES DON'T.
Can you have 2 subnets on the same VLAN? ›
Takeaway: Your switches won't warn you if you have multiple subnets using a single VLAN. Never assume a VLAN has only one subnet. When in doubt, do a show run interface Vlan300 on your layer-3 switches to view both the primary and secondary IPs.
Do VLANs need separate subnets? ›Yes if you separate a network with different VLANs you are creating separate networks like in subnetting. If you use VLAN to create different broadcast domain , subnetting becomes necessary as a part of it as you can not configure the two VLAN's with the same IP range.
How do I setup two subnets on one network? ›- Disconnect the second router.
- Reset it (just be sure)
- Change its IP address to 192.168. ...
- Set up the WiFi network as desired (probably the same as your other router to allow roaming)
- Disable DHCP.
- Connect a LAN port of your second router to a LAN port of the primary router.
Routers route between network, so each router interface belongs to a different network. Since you cannot connect both switches directly to the same router interface, you would be connecting them to two different networks. Also, switches use spanning-tree in order to create a single, loop-free path on the layer-2 LAN.
What is bridge mode on a router? ›Bridge mode is a setting within a router that turns off the router's Wi-Fi broadcast, turning it into a bridge between the network and another Wi-Fi router.
Can I use a fritzbox as a repeater? ›You can connect the FRITZ!Box as a wireless repeater to an existing FRITZ!Box (access point).
Does Fritz box support UPnP? ›the application should be allowed to set up all of the required port sharings in the FRITZ!Box on its own. port sharing is not required for a server service. the application supports the standard UPnP (Universal Plug and Play) or PCP (Port Control Protocol).
Is DECT better than WiFi? ›A further advantage of DECT over WiFi is the range. "Voice over WiFi" is usually very restrictive and switching to another access point without there being any interruptions when making a phone call only works with certain access points.
Does DECT interfere with WiFi? ›No, if they are operating correctly DECT and WiFi shouldn't interfere with each other. DECT operates in the 1900Mhz frequency range, specifically 1880-1930Mhz (in some regions up to 1980Mhz).
Is DECT a VoIP? ›DECT phones and your hosted VoIP phone system
Coupling a base station with cordless phones utilises this VoIP feature, allowing concurrent calls within the office or home.
Can a switch port have multiple VLANs? ›
You can configure all ports on a switch to serve a single VLAN or multiple VLANs, depending on the VLAN topology design. Each switch manufacturer has different procedures for configuring the ports of a switch. The following figure shows a local area network that has the subnet address 192.168. 84.0.
How many VLAN we can configure on switch? ›Creating a VLAN
A switch supports a maximum of 4096 VLANs, among which VLANs 0 and 4095 are reserved for system use, and VLAN 1 is the default VLAN.
While you can have more than one VLAN on a switch, they cannot communicate directly with one another on that switch. If they could, it would defeat the purpose of having a VLAN, which is to isolate a part of the network. Communication between VLANs requires the use of a router.
Do you need a special switch for VLAN? ›A router-on-a-stick will need a managed switch for VLANs. You need to be able to configure the switch for the trunk port and assign VLANs to the various ports.
Can you run VLANs through an unmanaged switch? ›Unmanaged switches use autonegotiated ports to determine parameters, such as data rates and whether to use half-duplex or full-duplex mode. Additionally, unmanaged switches have no concept of virtual LANs (VLANs). Thus, all devices belong to the same broadcast domain.
Do I need a managed switch for VLAN? ›For most home networks you can perfectly use an unmanaged switch. If you want to use VLANs to separate your network devices or a bit of security into your network then you will need atleast a smart switch.
Are VLANs and subnets the same? ›VLANs vs.
subnets, network administrators must understand the VLAN's purpose is to communicate with other devices within the same LAN, which is known as intra-VLAN communication. IP subnets, on the other hand, transmit data between VLANs -- dubbed inter-VLAN communication.
A virtual local area network (VLAN) is better than IP subnetting because its advantage is security. Learn what a VLAN is and how it differs from creating IP subnets, in this expert response from our networking fundamentals expert.
Can you assign a subnet to a VLAN? ›In an IP subnet–based VLAN, all the end workstations in an IP subnet are assigned to the same VLAN. In this VLAN, users can move their workstations without reconfiguring their network addresses.
How many subnets can we have on a single VLAN? ›A single-VLAN (all VLAN 1) network has multiple /24 subnets. Users are on one subnet, some servers are on Subnet 2 and other servers are on Subnet 3. There is a Layer 3 switch acting as the default gateway for all Subnets.
How do I route between VLANs? ›
The simplest way to enable routing between the two VLANs to simply connect an additional port from each VLAN into a Router. The Router doesn't know that it has two connections to the same switch — nor does it need to. The Router operates like normal when routing packets between two networks.
Can switch connect two different networks? ›Switches are incapable of joining multiple networks or sharing an Internet connection. A home network with a switch must designate one computer as the gateway to the Internet, and that device must possess two network adapters for sharing, one for the home LAN and one for the Internet WAN.
Can we send packets from one subnet to another with a switch? ›If the ping destination address is in the same subnet as the IP of the management interface, then the switch would arp for the destination. But if the destination address is in a different subnet (as the original post did specify), then the switch will forward its IP packet to its default gateway.
Can a switch connect multiple networks? ›Connect Multiple Ethernet Switches by Switch Cascade
By cascading more than one switch together, users can have multiple ports interconnecting each of the switches, all of which can be configured and managed independently in the group.
The OSA-Express Layer 2 implementation allows the hosts to manage IP addresses and ARP cache, so it is possible to have a single guest LAN segment (or VSWITCH segment) where two different hosts use the same IP Address on different VLAN groups.
Do you need a layer 3 switch for VLANs? ›Since VLANs exist in their own layer 3 subnet, routing will need to occur for traffic to flow in between VLANs. This is where a layer 3 switch can be utilized. A Layer 3 switch is basically a switch that can perform routing functions in addition to switching.
Do switches make subnets? ›Switches operate using only MAC-addresses, while routers also use IP addresses. Switches have many ports in the same subnet, while routers can only have one port per subnet.
How do I add a second subnet? ›You can create a separate subnetwork alongside your existing LAN network simply by configuring hosts on the second network using IP addresses from the 192.168. 2.0/24 subnet. Let's assume you configure all of the hosts in this example to use the router's IP address 192.168. 1.1 as their default gateway.
Can you route between subnets? ›Networks in the internet are connected to each other via routers. Routers carry traffic from one network/subnet to another. Routers maintain a routing table to decide how to route the IP packets. Each routing entry consists of the destination address, subnet mask and "route to" field.
Can two subnets talk to each other? ›Subnets in the same VPC can communicate with each other, but subnets in different VPCs cannot communicate with each other by default. However, you can create VPC peering connections to enable subnets in different VPCs to communicate with each other.
How many routers can be connected to a switch? ›
You are talking about 2 physically separate routers connecting to PoE switch. Yes, that is possible. You create 2 vlans on the switch. Lets say you create vlan 100 and 200, then add port,lets say 10 to vlan 100 and port 20 to vlan 200.
Do switches slow down network? ›An Ethernet switch should not affect your network's internet speeds, but it can in some circumstances. In a home network, your internet speeds can be only as fast as your slowest piece of equipment.
How do you cascade a network switch? ›...
Cascading your Switch to Another Switch
- Make sure all of the devices you will connect to the switch are powered OFF.
- Connect an Ethernet cable to one of the numbered ports on the secondary switch, then connect the other end to a computer.
Since the FRITZ!Box supports the standardized IPSec method, it can also be used with numerous VPN solutions from other manufacturers. However, the FRITZ!Box does not support methods such as OpenVPN or the IKEv2 protocol used by internet anonymization services.
Can I install a VPN on my fritzbox? ›With the FRITZ! VPN software you can establish a secure VPN (Virtual Private Network) connection over the internet from your Windows computer to your FRITZ!Box. This allows you to access your FRITZ!Box and devices in your home network with your computer even when you are away from home.
Are fritzbox routers secure? ›In addition to computers, smartphones and smart home devices, routers are also increasingly being targeted by hackers. For this reason, every FRITZ!Box is already protected by a unique network key in the factory settings.
Is Fritz Box VPN compatible? ›FRITZ!Box 7530 is an ideal router for the newest smart technologies introduction. It not only supports up to 12 simultaneous VPN connections (IPSec) but also allows for up to 300 mbps VDSL connection speeds, thanks to Supervectoring 35b.
Does Fritz box have a firewall? ›The FRITZ!Box offers you a completely closed firewall to protect against unwanted data from the internet. In the factory settings, all of the computers, smartphones, and other devices connected to the FRITZ!Box are already completely protected against attacks from the internet.
How do I use my Fritz box as an access point? ›- Click "Wi-Fi" ("Wireless") in the FRITZ!Box user interface.
- Click "Repeater" in the "Wi-Fi" menu. ...
- Enable the option "Repeater".
- Under "Access Point Selection", select the Wi-Fi network of your FRITZ!Box with internet access.
NordVPN: Our #1 choice for a FritzBox.
Servers in 59 countries. Works with Netflix and other popular services. Risk-free 30-day money-back guarantee.
How do I enable my FritzBox DMZ? ›
- Click "Permit Access" in the "Internet" menu.
- Click on the "Port Sharing" tab.
- Click the (Edit) button for the (computer) name of the device that you want to set up an exposed host for. ...
- Enable the option "Open this device completely for internet sharing via IPv4 (exposed host)".
You can use the FRITZ!Box as a fax and answering machine, without having to connect any additional devices. The FRITZ!Box can be used to send and receive faxes and you can configure up to five different answering machines.
Who makes fritzbox routers? ›The FRITZ!Box 7590 is one of the latest modem routers released by the German-based networking company (AVM) and, while its minimalist exterior may not give it away, this device is more than meets the eye: it can function as a DECT station for up to six handsets, it is compatible with ADSL/VDSL/fiber optic lines, it can ...
How can I improve my fritzbox Wi-Fi signal? ›Place the FRITZ!Box as high in the room as possible, for example on a shelf. Place the FRITZ!Box so that there are as few obstacles as possible between it and the wireless devices. Even small objects in the immediate vicinity of your FRITZ!Box can greatly reduce the range of the Wi-Fi signal.
What is the best security method for routers? ›When choosing from among WEP, WPA, WPA2 and WPA3 wireless security protocols, experts agree WPA3 is best for Wi-Fi security. As the most up-to-date wireless encryption protocol, WPA3 is the most secure choice.
What is the IP address for Fritz box? ›You can either enter http://fritz.box or the IP address of the FRITZ!Box (http://192.168.178.1 in the factory settings) to open the user interface. In addition, you can always use the emergency IP http://169.254.1.1 to access the FRITZ!Box. It is not possible to open the user interface via the guest access.
Is fritzbox dual band? ›The wireless device must be capable of dual band (2.4 and 5 GHz bands must be supported, see documentation of the wireless device). The FRITZ!Box must use the same SSID (name of the radio network) for 2.4 and 5 GHz (this is preconfigured in the factory settings of the FRITZ!Box). The FRITZ!Box must support Wi-Fi 5.
How does Fritz box mesh work? ›As a Mesh Repeater, the FRITZ!Box automatically adopts all of the necessary settings from the Mesh Master (for example Wi-Fi access information, guest access, schedule) and creates an additional Wi-Fi network that enables your devices to connect to the home network.