Managing VLANs?

npu3pak · November 11

Hello,
I'm trying to separate 2 VLANs that shouldn't be accessible from one another.
Port 1 is the uplink, port 2 a PC on port 8 I'm planning to use a laptop that should have access to the internet, but it doesn't (it gets IP, so I'm half there).
This is what I came up with:

PeterUK · November 11

VLAN's don't work the way you think you need a router with VLAN support to do tag VLAN and subnets.

Port based VLAN should do what you want but the switch you have is 802.1Q

Or a switch with ACL or/and Egress redirect would work too.

You can try the following which might work

Have all port 3-7 PVID 1 and ports 1-2, 8 non member for VLAN1 use port 3 to access the switch
VLAN2 port 2 tag port 1 untag other ports non member
VLAN3 port 8 tag port 1 untag other ports non member
VLAN4 port 1 tag port 2 and 8 untag other ports non member

save reboot switch

Zyxel_Melen · November 11

Hi @npu3pak,

Could you share the port you connect your router to? Does your router support VLAN/802.1Q?

npu3pak · November 11

https://community.zyxel.com/en/discussion/comment/71619#Comment_71619

I'm not sure if I understood it correctly, this is what I did, and it didn't work.

Screenshot 2024-11-11 at 07-04-50 GS1200-8.png

https://community.zyxel.com/en/discussion/comment/71630#Comment_71630

It's a MikroTik hAP ac^3 (RouterOS 7.16) so I guess it supports it, since while it's not that expensive, it isn't an entry level home router.

P.S. As you may already know, I'm not exactly network specialist, just slightly above average amateur 🤷‍♂️

PeterUK · November 11

https://community.zyxel.com/en/discussion/comment/71636#Comment_71636

On VLAN 2 and 3 you need to have both untag on port 1 tags are correct

also you need to change PVID so

port 1 is PVID 4

port 2 is PVID 2

port 8 is PVID 3

But as you have a router you can make a VLAN on it with given subnet then you do

remove other VLANs 2-4

VLAN5 port 8 untag PVID 5 and port 1 tag

VLAN1 ports 1-7 untag and PVID 1

Zyxel_Melen · November 11

Hi @npu3pak,

I think MikroTik RouterOS supports VLAN. Therefore, please ensure the "switch uplink port/router connecting port", and configure the VLAN settings correctly.

You may reference this FAQ for configuring VLAN on the GS1200:

https://community.zyxel.com/en/discussion/17957/how-to-configure-vlan-for-web-managed-switch

For example, I assume port 1 is the "switch uplink port/router connecting port," so you need to configure the VLAN 2 interface on MikroTik and configure port 1 as a VLAN-tagged member.

https://community.zyxel.com/en/discussion/26723/managing-vlans

P.S. 169.254.x.x doesn't mean your PC gets an IP address. This is a temporary IP address since it cannot get a DHCP IP address.