F5F Stay Refreshed Power Users Networks Configurar redirección de puertos en un Switch.

Configurar redirección de puertos en un Switch.

Configurar redirección de puertos en un Switch.

N
Ninjas_R_OP
Senior Member
743
08-31-2025, 02:41 PM
#1
Hello, I'm looking for advice from more experienced network professionals. From what I understand, a router handles routing and ports while a switch manages VLANs and traffic flow. In your recent project, you used a switch for multicast streaming in a hotel setting. You mentioned the same LAN port is used for both web GUI and IPTV multicast. Is it feasible to have a switch with 24 or 50 ports that blocks all traffic on port 86? Ports 1-49 are blocked, but only port 50 on the management port allows access to port 86? This seems related to ACL configurations. Could this work without relying on a router? Thanks. Andrew
N
Ninjas_R_OP
08-31-2025, 02:41 PM #1

Hello, I'm looking for advice from more experienced network professionals. From what I understand, a router handles routing and ports while a switch manages VLANs and traffic flow. In your recent project, you used a switch for multicast streaming in a hotel setting. You mentioned the same LAN port is used for both web GUI and IPTV multicast. Is it feasible to have a switch with 24 or 50 ports that blocks all traffic on port 86? Ports 1-49 are blocked, but only port 50 on the management port allows access to port 86? This seems related to ACL configurations. Could this work without relying on a router? Thanks. Andrew

M
mc_jiggles
Junior Member
27
09-01-2025, 09:05 PM
#2
I think costly Cisco switches should offer this feature, yet their intricacy and cost deter potential buyers.
M
mc_jiggles
09-01-2025, 09:05 PM #2

I think costly Cisco switches should offer this feature, yet their intricacy and cost deter potential buyers.

L
livvy1616
Junior Member
48
09-02-2025, 04:32 AM
#3
They likely share the identical LAN port and IP address, and both belong to the same VLAN. The device can indeed have several virtual interfaces on one physical port.
L
livvy1616
09-02-2025, 04:32 AM #3

They likely share the identical LAN port and IP address, and both belong to the same VLAN. The device can indeed have several virtual interfaces on one physical port.

O
oobaileyx
Member
209
09-02-2025, 11:58 AM
#4
I could use a setup with Zyxel switch and Port ACL to assign VLAN 1 exclusively for IPTV traffic. No one should be able to log in via port 86, and any attempts to route TCP port 86 to VLAN 2 should be blocked.
O
oobaileyx
09-02-2025, 11:58 AM #4

I could use a setup with Zyxel switch and Port ACL to assign VLAN 1 exclusively for IPTV traffic. No one should be able to log in via port 86, and any attempts to route TCP port 86 to VLAN 2 should be blocked.

K
karlerik_1999
Member
205
09-02-2025, 01:33 PM
#5
The IP Streamer connects via a single LAN port to the device at 192.168.1.13, which requires login when accessed through a web browser. This port also sends multicast traffic to specific addresses and ports like 224.2.2.2:1001. I considered applying port ACL and creating two VLANs—one allowing all multicast but blocking port 86. Zyxel confirmed this is feasible with their Port ACL feature. VLAN 2 grants full access to TCP port 86, which seems unusual for a typical router setup. In our case, since we operate an internal network without an external router, we had to devise an alternative method. This approach essentially blocks any user from accessing switch configuration login, similar to what the Zyxel article describes. I’ll check the details from the provided link.
K
karlerik_1999
09-02-2025, 01:33 PM #5

The IP Streamer connects via a single LAN port to the device at 192.168.1.13, which requires login when accessed through a web browser. This port also sends multicast traffic to specific addresses and ports like 224.2.2.2:1001. I considered applying port ACL and creating two VLANs—one allowing all multicast but blocking port 86. Zyxel confirmed this is feasible with their Port ACL feature. VLAN 2 grants full access to TCP port 86, which seems unusual for a typical router setup. In our case, since we operate an internal network without an external router, we had to devise an alternative method. This approach essentially blocks any user from accessing switch configuration login, similar to what the Zyxel article describes. I’ll check the details from the provided link.

H
HTRSA88
Junior Member
37
09-03-2025, 07:15 PM
#6
The scenario suggests the device has sufficient VLAN support, allowing ACLs to manage traffic effectively.
H
HTRSA88
09-03-2025, 07:15 PM #6

The scenario suggests the device has sufficient VLAN support, allowing ACLs to manage traffic effectively.