VLN Limit: Max of 8

MikeForshock

Have run into a situation where we are limited on VLAN count. By default the USG FLEX 100 will only allow 8 VLAN networks to be created.

We have now maxed that out and need to create more. Using in a router-on-a-stick type situation to segregate network segments/zones on a managed switch.

Is there a reason it is hardcoded to stop at 8?
Is there a fix or another path we can go to avoid this?

PeterUK

Limited so you have to buy a bigger Zywall page 1202

https://download.zyxel.com/USG_FLEX_100/user_guide/USG%20FLEX%20100_V5.36_Ed1.pdf

PeterUK

Limited so you have to buy a bigger Zywall page 1202

https://download.zyxel.com/USG_FLEX_100/user_guide/USG%20FLEX%20100_V5.36_Ed1.pdf

Zyxel_Emily

Hi @MikeForshock,

If you need to create more VLAN interfaces, USG FLEX 200 and USG FLEX 500 are recommended.
Max. number of VLAN interface
USG FLEX 200: 16
USG FLEX 500: 64

MikeForshock

https://community.zyxel.com/en/discussion/comment/53507#Comment_53507

Thanks for the very precise answer.

Disappointing, will have to go another direction on this. Even the 100 is underutilized in this deployment, so anything larger is more waste.

PeterUK

Why you need so many VLAN's?

MikeForshock

https://community.zyxel.com/en/discussion/comment/53534#Comment_53534

Critical Infrastructure projects, so is very, very zero trust as the buzzwords go.

We segment the network heavily and use the firewall to assign allowed inter vlan networking. Was attempting to use the USG as a central firewall/router (router on a stick, non-routed network) versus multiple, separately managed units. We use it for minimal operator/user devices (2-3 terminals, viewing stations) so the USG FLEX is doing very, very little work overall currently. Even a USG20/FLEX 50 was doing just fine, but it does not have the various security functions offered by the 100 or higher.

Each location/site may have as many zones/vlans/subnets (Controls, Security, Corporate Data, IoT/Data, Guest/BYOD, Backhaul Radio/Network). Some locations have as many as 100 sites (most without Guest type networks).