GS1900: How to configure VLAN on Zyxel Switch

This tutorial will show you, how to set up tagged and untagged VLAN on Zyxel switches.

Step by step guide

These steps will show you how to set up a VLAN that separates your WiFi traffic in your network. Please note that this tutorial is only covering the configuration of the switch. In this tutorial, the default management VLAN1 will remain untouched. Refer to the video to see a graphical topology.

1. Connect your computer directly to one of the LAN ports and log into the web interface with the default IP 192.168.1.1 using the default credentials admin/1234

2. Go to Configuration > VLAN > VLAN and create your VLAN (on some switch models you will find the VLAN configuration in the tab “Advanced Settings”)

3. Click “Add”, type in the desired VLAN ID in the box “VLAN List”. This ID will be added to the “VLAN Name Prefix” you choose. If you left “VLAN Name Prefix” blank it will be filled with "VLAN".

4. After adding the VLAN, navigate to the “VLAN Port” tab and choose the created VLAN ID and define the “Tagged” or “Untagged” membership of each port

- “Forbidden” = prohibit this port from joining the VLAN
- “Excluded” = remove the membership of this port
- “Tagged” = an incoming packet with the correct VLAN tag will be forwarded
- “Untagged” = an untagged packet from a client that is not able to send tagged VLAN packets (e.g. a computer) will be forwarded into the VLAN. A PVID for this port will be needed!

Please note: A port can only support one untagged membership (but multiple tagged memberships)! This port then needs a corresponding PVID to the VLAN ID, if it is untagged!

5. In this example ports, 3 & 4 (where the computers are connected) will be set to “Untagged” and ports 5 – 8 to “Tagged” (because there are access points connected that are able to send tagged packets). Finish this step by clicking “Apply”.

6. For ports 3 & 4 the fitting PVID needs to be set by navigating to the tab “Port”, then ticking the ports you need to configure, click “Edit”.

7. Enter the needed VLAN ID (should be the same as the above-set VLAN ID) and click “Apply”.

 8. After configuring the switch you should always save your new configuration on the switch.
Otherwise, the switch will lose the changes after a reboot.

Also interesting:
Do you want to have a look directly at one of our test devices?
Have a look here in our virtual Lab:

Virtual Lab - Security Device as AP Controller

Virtual Lab - NXC Professional WiFi Solution