Vlan1 On Primary LAN Interface

PeterUK

ALL VLAN on USG are tagged only.

Why is it so hard to test with a laptop/PC with NIC set to the given VLAN on USG to get that to work?

PeterUK

Maybe I should explain

A untagged packet has no VLAN tag in the packet there is no sure thing as a packet marked as a VLAN that is untagged

dcgtechnologies

https://community.zyxel.com/en/discussion/comment/80787#Comment_80787

Peter I know this already and if you knew all this why didn’t you make it apart of your process instead of throwing things at the wall to see what sticks. I like complete processes and not parts of it. Hence the reason why I asked if this was documented anywhere and worn out with proving your process on the fly. I wasted an hour and half when doing the first part of your process to find out it did not work and I had to rollback. Put yourself in the other persons shoes for once and provide complete clarity and transparency.

The issue lays within the routing of the Interface Vlan10 profile. It clearly worked within my internal network along with connecting all my vlans together for passing traffic internally only and did not let me get past the internal Vlan10 to get out to the internet so my switches work fine as they are doing what they have programmed into them, but now all the routing is missing in the Vlan10 profile and I do not want to go through another “testing” phase with something you think will work. That is why hooking up a laptop is a waste of time and causes me unnessary work.

Again I am not challenging your knowledge and I do appreciate the help, but your approach is little much and well needs to be better so I do not waste anymore time in trying to see what works especially when rule sets are already there in place.

So now we know vlans do not do routing and all they do is seperate networks / traffic. So what does the LAN1 default zone profile have for routing that the Vlan10 profile is missing. That is the question.

Thank you.

PeterUK

I suggest putting a case on

Zyxel Support Campus EMEA

dcgtechnologies

https://community.zyxel.com/en/discussion/comment/80792#Comment_80792

I was planning on it anyway as you can not tell me why. Thank you.

Zyxel_Melen

Hi @dcgtechnologies

I quick read this thread, it seems like the LAN 1 interface and VLAN 10 interface using the same IP address. This will cause issue on routing part and packet forwarding part (which VLAN should the firewall tag?). Please change the LAN1 interface "Address Assignment" to unassigned.

dcgtechnologies

https://community.zyxel.com/en/discussion/comment/80800#Comment_80800

Hello…..Thank you for the information, but I just want to make sure this is for sure the correct information as I want the newly created Vlan10 interface to be the primary interface to route all traffic for all my VLANS that LAN1 used to handle. Thank you.