Use Multiple LAN Subnets with Tag-Based VLAN

Vigor Router Setup

1. Go to Configuration / LAN / LAN Networks, click “Add” to create LAN Networks as follows:
1. Enter a Name of the LAN Network.
2. Enter the private IPv4 Address.
3. Setup DHCP Server Configuration.
4. Click Apply to save the profile.

2. Go to Configuration / LAN / VLAN List, click “Add” to create VLAN ID as follows:
1. Input the VLAN ID number in range 1~4096.
2. Enter a Name of the VLAN.
3. Select the LAN network we just created.
4. Click Apply to save the profile.

3. Go to Configuration / LAN / Interface VLAN, configure the Interface VLAN Settings as follows:
1. Select “Trunk” as Port Type. We use Port 2 as example.
2. Set 1 as Untagged VLAN.
3. Click “Select VLANs” option and we can select the VLANs you would like to use on switch.
4. Click Apply to save the profile.

VigorSwitch Setup

4. Here we use a VigorSwitch PQ2200xb for example.
   Go to Configuration / VLAN Setup / Existing VLAN page to create VLANs on VigorSwitch WebUI. Click “Add” button and enter VLAN ID and VLAN Name. The VLAN ID number should correspond to the tag set up on VigorRouter.
5. Go to Configuration / Port Setup / VLAN to setup VLAN as follows:
1. Set up the VLAN ID for uplink port. Here we take 2.5GE1 for example.
2. Select Trunk as Interface VLAN mode and select all VLAN IDs in Tagged VLAN.
3. Click OK to save.

4. Set up the VLAN ID for client port. Here we take 2.5GE2 for example.
5. Select Access as Interface VLAN mode and set up VLAN ID as the PVID. Please note that the PVID should correspond to VLAN ID.
6. Click OK to save.

With the above configuration, the device connecting to the Port 2 of the switch belongs to Router's Subnet LAN3 and should get an IP address in subnet 192.168.3.0/24. And we can see it on the ARP table on router’s Monitoring / ARP Table page.

Vigor Router Setup

1. Add a new VLAN via LAN >> Switch >> 802.1Q VLAN, edit the profile as follows:

1. Input VLAN ID (VLAN ID for each VLAN must be unique)
2. Select Member for this VLAN Group. In this example, we will use LAN_Port_1 as the trunk port connecting to the switch, so each VLAN Group should have LAN_Port_1 as Member.
3. Untag should set to None for the new created VLAN Groups.
4. Apply the settings.

2. Add another 802.1Q VLAN with the same steps.

3. After the above configurations, there will be three VLAN groups on the router.

4. Add a new LAN profile for VLAN ID 100 from LAN >> General Setup, and edit the profile as follows:

1. Input Profile Name
2. Input the VLAN ID as 100
3. Input the LAN IP address
4. Input DHCP Server Start and End IP
5. Apply the configurations

5. Add another LAN profile for VLAN ID 200 with same steps.

6. After the above configurations, Vigor3900 now has three LAN profiles. When the router receives packets with no tags from LAN_Port_1 and LAN_Port_2, it will assign LAN1 IP address (192.168.1.x) to the host; when receives packets with VLAN ID 100, it will assign LAN_100 IP address (192.168.100.x) to the host; when receives packets with VLAN ID 200, it will assign LAN_200 IP address (192.168.200.x) to the host.

However, since PC doesn't send packets with VLAN tags, we need a switch to add VLAN ID 100 or VLAN ID 200 for hosts belongs to different VLAN.

VigorSwitch Setup

Here we use a VigorSwitch G2260 for example.
1. Add two VLANs for VLAN ID 100 and 200 from VLAN Membership settings. In this example above, Port 1 to Port 4 belongs to VLAN 100. Port 5 to Port 8 belong to VLAN 200. Other ports belong to the default VLAN (no TAG).

2. In this example, we will use Port 24 of the switch as the trunk port and connect to Vigor3900 LAN Port 1, so Port 24 must be a member to all VLAN Groups.

3. Port 1 to Port 8 don't belong to the default VLAN group (untagged), so we need to uncheck these Ports from the default VLAN group.

4. Configure Port PVID. In this example, the PVID for Port 1 to Port 4 should be 100, and the one for Port 5 to Port 8 should be 200.

5. Port 24 is the port to connect to the router, so please configure it as "S-custom-port" for port type and "Hybrid" for egress rule.

With the above configurations, the switch will add VLAN ID 100 for the packets sending out from Port 1 to Port 4. While switch receives packets with VLAN ID 100, it will untag VLAN ID 100 before sending the packets back to PC on Port 1 to Port 4.

Now, we've set up three LAN networks with Vigor3900 and a managed switch. PC on Port 1 to Port 4 of the switch will belong to Vigor3900 LAN_100; PC on Port 5 to Port 8 of the switch will belong to Vigor3900 LAN_200; PC on Port 6 to Port 23 of VigorSwitch will belong to Vigor3900 LAN 1.