No I didn't realise you were refering to VLAN1.
This is where is gets confusing. VLAN1, the default VLAN, is usually only ever tagged within the switch. Although you can send it tagged between switches you could equally send it untagged with no difference in the logical network layout.
Anyway I think you have it correct.
ok, well now that we are on the same page, see if you can help me out with this...
both my vlan switches are on the 192 network.
8 port- 192.168.1.20
24 port- 192.168.1.9
for now, there are 0 rules in play to block vlans
here is the issue.
i get a laptop and join it to the 172 or 10 network, w/o any issues, i can ping 192.168.1.20 and 192.168.1.9...replies come back for both.
i can web into the .20 8 port switch but i cant web into the .9 port switch.
do you know why that is?
everything is tagged as i typed it in my most recent tagged/untagged port above.
not sure why i can ping and web into .20 but i can only ping .9 and not web into it.
the .9 switch is more advanced, i wonder if there is some sort of option i am missing? i am almost certain in the 24 port, .9, switch each vlan can have its own gateway address and i know i set the gateway for vlan1 at 192.168.1.1, but i dont know that would cause me to not be able to web into it, locally.