Vlan Untagged / PVID

Alex Posts: 4  Freshman Member
edited April 2021 in Switch
Hello All,

Everytime I need to configure a port for an equipment (like a PC) in a vlan I set the port "untagged" Vlan3 and also set the PVID to 3.
I'am wondering which case  needs to get a PVID different from the Untagged Vlan.
Just curious.

If someone has an example...


  • Zyxel_Ryan
    Zyxel_Ryan Posts: 66  Zyxel Employee
    Hi @Alex

    We usually set ports connected with end-devices (For example, your PC) Untagged because end-devices usually cannot recognized tagged packets. 
    Tagged out setting is usually used when ports connected with another switches and you want packets to be sent to certain VLAN so that you need tagged out. 


  • Alex
    Alex Posts: 4  Freshman Member
    Hi Ryan,
    Ok but in which case you set PVID different from the untagged ?

  • Daniel_LU
    Daniel_LU Posts: 16  Freshman Member
    edited June 2018
    Hi @Alex
    if you create a VLAN, for example VLAN50 (192.168.50.xxx) and you want certain switch ports to assign the 192.168.50.xxx addresses then you connect the devices in the ports with the PVID. Example from port 10 to port 15 of the switch you set the PVID to 50 and the 5 ports with this configuration will assign the IP 192.168.50.xxx.

    All other ports will not assign ip 192.168.50.xxx but 192.168.2.xxx.


  • Zyxel_Ryan
    Zyxel_Ryan Posts: 66  Zyxel Employee
    Hi guys, 
    Thanks for your discussion. 
    About @Alex's question, we usually set a port PVID with untagged out. 
    If we set a port as tagged out, the PVID is usually useless under this setting. 

  • s_k
    s_k Posts: 9

    Alex said:
    I'am wondering which case  needs to get a PVID different from the Untagged Vlan.
    If someone has an example...
    Hi Alex,

    please note that you can set more than one VLAN to untagged in outgoing direction. In the incoming direction, on the other hand, it is a 1 to 1 relationship (determined by the PVID).

    When do you need this?
    In 99.99 percent of cases, you do not need this. But in some rare cases you can use this. 
    The most important use cases are so-called "asymmetric VLANs".
    Please read the following:
    ftp://ftp.d-link.co.za/DFL/dfl860/SetupGuides/Asymmetric VLAN with DAP(0716182927).pptx

    Ultimately, this is the underlying technology behind so-called "private VLANs". Cisco calls this "community private VLAN" in contrast to "private vlan edge", which is referred to as "protected port" in other manufacturers.