Tutorial of Switch VLAN Configuration (V4.80)

Zyxel_Kay

VLAN Simple Introduction

• VLAN is primarily used for controlling the isolation of network packets and traffic.
• It isolates the network at the logical layer.
• It prevents collisions caused by broadcast packets, ensuring smooth network operation.

Note: This tutorial is suitable for Switch version 4.80 and above. If an older version of the Switch web management interface is used, the display may be different.

VLAN Principles Overview

Label packets to inform the next Switch which VLAN the packet belongs to.

For more details, please refer to the IEEE 802.1Q protocol documentation.

VLAN Operation Process

• Ingress Rules: Classify incoming packets into VLANs.
• Forwarding Process: The Switch looks at the database to determine how to forward packets.
• Egress Rules: Determine whether packets should still carry VLAN tags when leaving a port.

VLAN Ingress Rules

• When the Switch receives packets already carrying VLAN tags, it takes no action.
• When the Switch receives packets without VLAN tags, it actively applies the Port's PVID setting to make the packet a member of a specific VLAN.

VLAN Forwarding Process

• Check the device's own database to decide which port to send the packet to.
• MAC table: Inspect the destination MAC address.
• VLAN table: Examine the VLAN ID.

VLAN Egress Rules

Determine the VLAN tag status when packets leave based on VLAN membership properties.

• When the port is set to Tag, packets will continue to carry the tag when leaving.
• When the port is set to Untag, the Switch will remove the VLAN tag when packets leave.

VLAN Configuration Example

In the example below, users have already configured VLAN 10 and 20 interfaces on the firewall. They want IPCAM connected to switch P1 to obtain VLAN 10's IP 192.168.10.10, and employee computer connected to switch P2 to receive VLAN 20's IP 192.168.20.20.

VLAN Configuration Steps

Go to SWITCHING > VLAN > VLAN Setup

• Step 1 – Static VLAN: Create VLAN
• Step 2 – VLAN Port Setup: Configure VLAN Port membership properties

Step 1 - Create VLAN Go to SWITCHING > VLAN > VLAN Setup > Static VLAN

Configure VLAN Port Membership Properties

If you find it difficult to understand, remember this tips:

• For end device ports (e.g., PC, IPCAM, etc.), uncheck Tx Tagging.
• For uplink ports to intermediate devices (e.g., firewall, router, switch, AP, etc.), keep Tx Tagging checked.

Step 2 - Configure VLAN Port Set the Port PVID to determine which VLAN the Port belongs to.

• If the Port is used to connect intermediate devices (e.g., firewall, router, switch, AP, etc.), in most cases, keep PVID as 1.
• Generally, only end device ports (e.g., PC, IPCAM, etc.) need to be assigned to a specific VLAN via PVID.

VLAN Configuration Results

Go to SWITCHING > VLAN > VLAN Status

Quickly view the current VLAN settings on the Switch.