routing between VLANs

[dave2001]

I could use some help/advice.
I think the situation I am asking about is:
configuring routing between VLANs

Specifcally, I'd like to know if I can replace 2 switches,
with a single switch with 2 VLANs.

My (crude) diagram of my current setup is:

DSL
|
switch1 -> {few computers w/public static IPs}
|
NAT (AppleAirport w/10.0.1.x subnet)
|
switch2 -> {many computers on 10.0.1.x LAN}


Would it work to get a VLAN capable switch,
like a GS716T, and setup 2 VLANS? Like:

DSL
|
VLAN1 -> {computers w/public IPs}
|
NAT
|
VLAN2 -> {computers on private subnet}


If this is possible, how does one do this?
I see something about 2 different kinds of VLAN:
802.1Q VLAN and port VLAN
Which kind should I use? And are there any tutorials on
how to do this?
Am I using the wrong terminology?

Any help is appreciated.

 

[thiggins]

If you're trying to share a single public IP address with multiple computers on private IPs, you'll need a router. A VLAN will do nothing to share a connection.

 

[dave2001]

Thank you for responding.
Sorry I guess I wasn't clear about this:
I'm using an Apple Airport N, but as far as I understand, it is pretty much the same as any other wireless router.
So my current set up is:

DSL modem
- connects to (simple, ?unmanaged, is that the right term) switch (call it switch1)
(so I guess technically, the switch lives(?) at my ISP subnet - say 216.254.67/24)
(the DSL modem is a bridge - isn't that the correct lingo?)
- from one port at switch1, I have a computer with static IP like 216.254.67.64, and default route set like 216.254.67.1 (ISP)
- from another port at switch1, I have my wireless router
(I'm just going to ignore the wireless part, and talk about its wired connections)
This wireless router has external (WAN?) interface set to static IP like 216.254.67.32
and default route set like 216.254.67.1 (per my ISP, plus DNS servers)
and internal (LAN) interface set to static IP like 10.0.1.1
and is set up to provide DHCP and NAT to the internal network

- from the internal interface of the wireless router, I have it connected to another (simple, unmanaged) switch, call it switch2
switch2 (is/represents? - sorry don't know the lingo) subnet 10.0.1/24
- from switch2 other ports, I have several computers which get their IP in the 10.0.1.x range via DHCP from the wireless router, and their default route is 10.0.1.1 (the router)
This all works fine as far as I can tell.

Now, I got myself a "Smart" switch, and I thought I would just replace
the 2 unmanaged switches with this single switch, but configured into 2 VLANs.
SmartSwitch ports 1 to 8 = VLAN1 (public) (intended to be like 216.254.67/24)
SmartSwitch ports 9 to 16 = VLAN2 (private) (intended to be 10.0.1/24)
so the connections would be:
DSL modem
- to port 1 of SmartSwitch
- port 2 to computer with static IP like 216.254.67.64, default route like 216.254.67.1
- port 3 to external interface of wireless router/DHCPserver/NATserver (IP like 216.254.67.32, default route 216.254.67.1)
- router/DHCP/NAT internal interface (10.0.1.1) back to port 8
- port 9,10,etc are home computers set to get IP via DHCP from router at 10.0.1.1, and have 10.0.1.1 be their default route.

But this doesn't work. The routing just doesn't seem to work.
The home computers can see the wireless router and get their IP via DHCP,
but they can't connect out - as if they can talk to the wireless router,
but the router doesn't pass anything along on its external interface to the second
VLAN.

I'm no network expert (I'm in science, but not engineering), and I'm having a hard time
trying to figure out whether it will never work, or I've just configured it wrong.

Again, thanks for any help.