Tutorial of Switch VLAN Configuration (V4.80)

Options
Zyxel_Kay
Zyxel_Kay Posts: 583  Zyxel Employee
First Anniversary 10 Comments Friend Collector First Answer
edited January 3 in Port & VLAN settings

VLAN Simple Introduction

  • VLAN is primarily used for controlling the isolation of network packets and traffic.
  • It isolates the network at the logical layer.
  • It prevents collisions caused by broadcast packets, ensuring smooth network operation.
VLAN_scenario.png

Note: This tutorial is suitable for Switch version 4.80 and above. If an older version of the Switch web management interface is used, the display may be different.

VLAN Principles Overview

Label packets to inform the next Switch which VLAN the packet belongs to.

For more details, please refer to the IEEE 802.1Q protocol documentation.

principle_overview.png

VLAN Operation Process

  • Ingress Rules: Classify incoming packets into VLANs.
  • Forwarding Process: The Switch looks at the database to determine how to forward packets.
  • Egress Rules: Determine whether packets should still carry VLAN tags when leaving a port.
operation_process.png

VLAN Ingress Rules

  • When the Switch receives packets already carrying VLAN tags, it takes no action.
  • When the Switch receives packets without VLAN tags, it actively applies the Port's PVID setting to make the packet a member of a specific VLAN.
Ingress_Rule.png

VLAN Forwarding Process

  • Check the device's own database to decide which port to send the packet to.
  • MAC table: Inspect the destination MAC address.
  • VLAN table: Examine the VLAN ID.
Forwarding_Process.png

VLAN Egress Rules

Determine the VLAN tag status when packets leave based on VLAN membership properties.

  • When the port is set to Tag, packets will continue to carry the tag when leaving.
  • When the port is set to Untag, the Switch will remove the VLAN tag when packets leave.
Egress_Rule.png

VLAN Configuration Example

In the example below, users have already configured VLAN 10 and 20 interfaces on the firewall. They want IPCAM connected to switch P1 to obtain VLAN 10's IP 192.168.10.10, and employee computer connected to switch P2 to receive VLAN 20's IP 192.168.20.20.

example.png

VLAN Configuration Steps

Go to SWITCHING > VLAN > VLAN Setup

  • Step 1 – Static VLAN: Create VLAN
  • Step 2 – VLAN Port Setup: Configure VLAN Port membership properties
step.png

Step 1 - Create VLAN Go to SWITCHING > VLAN > VLAN Setup > Static VLAN

Configure VLAN Port Membership Properties

If you find it difficult to understand, remember this tips:

  • For end device ports (e.g., PC, IPCAM, etc.), uncheck Tx Tagging.
  • For uplink ports to intermediate devices (e.g., firewall, router, switch, AP, etc.), keep Tx Tagging checked.
VLAN Create.png

Step 2 - Configure VLAN Port Set the Port PVID to determine which VLAN the Port belongs to.

  • If the Port is used to connect intermediate devices (e.g., firewall, router, switch, AP, etc.), in most cases, keep PVID as 1.
  • Generally, only end device ports (e.g., PC, IPCAM, etc.) need to be assigned to a specific VLAN via PVID.
Configure_VLAN_Port.png

VLAN Configuration Results

Go to SWITCHING > VLAN > VLAN Status

Quickly view the current VLAN settings on the Switch.

Configuration result.png

Kay

Categories

Switch FAQ Tag

EnglishTiếng ViệtРусскийไทย中文（台灣）