Zyxel USG110 access VLAN Config

mike_bt
mike_bt Posts: 8
Friend Collector First Comment
in Security

I have a Zyxel USG110 and an HP 1810 managed switch. I want to create two VLANs on port 5 of the Zyxel, which is directly connected to the HP managed switch. I intend to set up the two VLANs as access VLANs on the HP switch with the following configuration:

  • Port 1 in WAN
  • Ports 2 and 3 in VLAN 20
  • Ports 5, 6, 7, and 8 in VLAN 30

In the HP 1810 switch, should I configure the ports as tagged, untagged, or excluded?

Thank you for your assistance!

All Replies

  • PeterUK
    PeterUK Posts: 3,160  Guru Member
    Community MVP 2500 Comments Sixth Anniversary 100 Answers

    Port 1 PVID 1

    For VLAN 20 port 1 tag ports 2 and 3 untag with PVID 20

    For VLAN 30 port 1 tag ports 5,6,7 and 8 untag with PVID 30

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,100  Zyxel Employee
    250 Answers Zyxel Certified Network Engineer Level 1 - Switch Third Anniversary 1000 Comments

    If one of ports 2, 3, 5, 6, 7, and 8 is not connected with a client but a VLAN-aware network device, you should set tag for the related VLAN.

    Zyxel Melen


    Don't miss this great chance to upgrade your Nebula org. for free! 


  • mike_bt
    mike_bt Posts: 8
    Friend Collector First Comment
    https://community.zyxel.com/en/discussion/comment/68356#Comment_68356

    Hello,

    For VLAN 20, I have to untag ports 2 and 3 and tag port 1?

    For VLAN 30, I have to untag ports 5, 6, 7 and 8 and tag port 1?

    Is that what you mean?

  • PeterUK
    PeterUK Posts: 3,160  Guru Member
    Community MVP 2500 Comments Sixth Anniversary 100 Answers
    edited July 31

    yes and set the

    PVID to 20 on ports 2 and 3

    PVID to 30 on ports 5, 6, 7 and 8 

    you should set for VLAN 20 for ports 5, 6, 7 and 8 excluded/forbidden

    and set for VLAN 30 for ports 2 and 3 excluded/forbidden

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）