This topic

VLAN on Smart Hub 2 Using a Switch

LegendarySpork9 — Mon, 08 Jan 2024 20:25:42 GMT

Hello,

Hope everyone is well.

I am looking at setting up a mini pc to act as a server at home. As part of its functions, it needs to be able to accept incoming traffic from outside computers but this obviously opens the home network up to potential attacks. I have spoken to my works Sys Admin and he suggested a VLAN but the Smart Hub 2 doesn't support it.

I am toying with the idea of buying a switch for £25 that does support it. My question is, if I ethanet the router to the switch and then the switch to the mini pc, can I filter traffic correctly? Does the smart hub tag traffic correctly?

For those that say, buy a router that supports VLAN, a) I don't have that kind of money to throw around and b) its not something the networks owners are open to. So this is really my only option.

Thanks in advance.

Re: VLAN on Smart Hub 2 Using a Switch

licquorice — Mon, 08 Jan 2024 21:22:16 GMT

You don't need to open up your whole network, simply give the server a static IP address outside of the DHCP range of the hub and forward the relevant port(s) to it. The server will be password protected.

Bear in mind your public IP address will be dynamic so you will need to use a DDNS service on the hub.

Re: VLAN on Smart Hub 2 Using a Switch

LegendarySpork9 — Mon, 08 Jan 2024 21:48:20 GMT

how does one do this? Assuming I know the ports needed, I can do that bit.

But how do I know what the range of the DHCP is and how do I know whether the IP will be available? How do I setup a DDNS service on the hub?

Re: VLAN on Smart Hub 2 Using a Switch

licquorice — Mon, 08 Jan 2024 21:59:07 GMT

Set the server to 192.168.1.10

Port forwarding and DDNS settings are in the advanced settings of the hub. You will need to set up an account with the service you decide to use. I can't remember off hand, but I think there are about 4 to choose from

Re: VLAN on Smart Hub 2 Using a Switch

LegendarySpork9 — Mon, 08 Jan 2024 22:15:29 GMT

Thanks for all that, I'll have a look.

What exactly is the range of the DHCP though? just out of interest.

Re: VLAN on Smart Hub 2 Using a Switch

licquorice — Mon, 08 Jan 2024 22:31:25 GMT

You can see in the advanced settings but it is 192.168.1.64 - 192.168.1.253

Re: VLAN on Smart Hub 2 Using a Switch

countrypaul — Mon, 08 Jan 2024 22:29:47 GMT

The default iirc is 192.168.1.64-250 (but maybe 253 as I might have altered mine), the ones below 64 can be used for static addresses.

Re: VLAN on Smart Hub 2 Using a Switch

LegendarySpork9 — Mon, 08 Jan 2024 22:35:58 GMT

Thanks, I did manage to find this.

I tried changing the IP of my PC to test it and even when allowing changes, I couldn't change the IP. I clicked the IP box and nothing happens.

Re: VLAN on Smart Hub 2 Using a Switch

licquorice — Mon, 08 Jan 2024 22:42:37 GMT

You need to set the adapter settings for IPv4 to manual rather than get via DHCP.

Set address as 192.168.1.10, subnet mask 255.255.255.0, gateway 192.168.1.254

Re: VLAN on Smart Hub 2 Using a Switch

Crimliar — Tue, 09 Jan 2024 01:20:11 GMT

When you alter the IP address of your computer, you'll need to "refresh" the connection to ensure the change takes! One way of doing this from the command prompt is:

C:\Users\yourname>ipconfig /release
then
C:\Users\yourname>ipconfig /renew

Re: VLAN on Smart Hub 2 Using a Switch

jaymorley — Mon, 04 Aug 2025 11:15:37 GMT

I have an almost identical question and have stumbled across this.

Just to confirm, are you saying do this in addition to having the switch in place or are you saying the switch isn’t even needed?

My daughter wants me to set her up a Minecraft server which I’m going to use an old gaming laptop for. I’ve seen people saying a VLAN would be the best/most secure option however then found this post.

Thanks

Re: VLAN on Smart Hub 2 Using a Switch

licquorice — Mon, 04 Aug 2025 11:32:07 GMT

The switch isn't needed.

Re: VLAN on Smart Hub 2 Using a Switch

jaymorley — Mon, 04 Aug 2025 11:55:59 GMT

Thanks for this, much appreciated.

Earlier on in the thread you posted this ‘Bear in mind your public IP address will be dynamic so you will need to use a DDNS service on the hub.’ I’ve had a Quick Look and no-ip seems to be recommended by a few people. With this in place would you recommend anything else to make it more secure or will this be enough?

For context. My daughter wants to setup a Minecraft server that will allow around 6-7 friends to access. My only concern is that it be secure.

Thanks again.

Re: VLAN on Smart Hub 2 Using a Switch

licquorice — Mon, 04 Aug 2025 12:07:46 GMT

No IP will be fine.

Re: VLAN on Smart Hub 2 Using a Switch

jaymorley — Mon, 04 Aug 2025 12:12:41 GMT

Thanks again. 👍

Re: VLAN on Smart Hub 2 Using a Switch

TimCurtis — Mon, 04 Aug 2025 14:35:00 GMT

Bear in mind that frequently now you don't get a unique public IP Address as these are running out and a system called CG-NAT is used where a number of users share the public IP address so using a DDNS isn't possible. Directing to the correct users is done at the ISP level.

One option is possibly to pay extra for your own static IP address if offered or ?? - I don't know that yet as I'm trying to find a solution myself without the extra expense of renting my own static address.

Re: VLAN on Smart Hub 2 Using a Switch

licquorice — Mon, 04 Aug 2025 15:37:13 GMT

As far as I'm aware, BT aren't using CG-NAT currently, neither do they offer static IP addresses for residential customers.

Re: VLAN on Smart Hub 2 Using a Switch

LegendarySpork9 — Mon, 04 Aug 2025 15:48:09 GMT

The way I have it setup currently, and this is slightly more pricy and complicated, is I have the Minecraft server port forwarded through the BT hub, then I have a domain I purchased that links to the external IP through DNS. So players join using that instead of the IP.

Then I have a Python script that runs on the server every 5 minutes that checks the machine's external IP against its previously stored one. If it is different, then it pings me on Discord to update the DNS record to the new value.

It works, although I have only put it in place recently. So I haven't got a live example of it working, only the test data.

As far as security concerns go, the only port you are exposing is 25565, which is monitored solely by the Minecraft server. A port can only be accessed by one thing at a time, so if the Minecraft server is using it, nothing else except traffic for the server can access the machine. If you were to try to access the IP or domain remotely through Google for example from an external connection, all you will get is a "Refused to connect message".

If you did so internally, then you will get the router's none admin config page.

Re: VLAN on Smart Hub 2 Using a Switch

licquorice — Mon, 04 Aug 2025 15:49:35 GMT

DDNS does all that automatically. You don't connect to an IP address with DDNS.

Re: VLAN on Smart Hub 2 Using a Switch

LegendarySpork9 — Mon, 04 Aug 2025 15:52:25 GMT

I don't have Dynamic DNS setup because I don't particularly want to rely on third-party software. If I end up changing the DNS record that much that it becomes a problem, then I will look into that option.