How to configure VLAN on Zyxel Switch [GS/XGS-Series]

This step by step guide shows how to setup VLAN with Zyxel GS/XGS Series Switch. We will show you how to add VLAN and how to set different setup between setup untagged and tagged VLAN. Zyxel supports different Types of VLANs, this KB is based on Tag-based VLAN (802.1Q). 

Step by step guide

These steps will show you how to setup a VLAN that separates your Guest traffic in your network, here as example VLAN10. Please note that this tutorial is only covering the configuration of the switch. 

1. Login 

2. Add VLAN

3. Set PVID - for devices that dont support VLAN (VLAN-unaware)

4. CLI Example

5. Deeper Informations

1. Login to Switch

Please Login to Switch with default IP 192.168.1.1 and "Ignore" this Message, this can be changed later.

2. Add VLAN

Go to Advanced Application > VLAN > VLAN Configuration

"Click" > Static VLAN

Add Name, VLAN ID, select Control and Tagging.
Here we set all Ports to fixed and Tagging, except Port 1-2 this Port will be used for devices that cannot handle VLAN (VLAN unaware like normal PC, A PVID for this port will be needed!) and all other Ports for devices that can VLAN-(VLAN-aware). Last please "Click" on ADD:

Scroll down and check, VLAN is add:

Go to Advanced Application > VLAN > VLAN Configuration

3. Set a PVID

For devices that dont support VLAN (VLAN-unaware, like a normal PC).

In Example before Port 1-2 is not set to Tx-Tagging. This Ports should only be member of VLAN10 and not of VLAN1. Go to Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup:

Set Port 1-2 to PVID 10 and apply settings:

Additional deeper Information’s regarding VLAN Trunking you can find here.

Now we check (Go to Advanced Application > VLAN > Status) VLAN1:

Go to Advanced Application > VLAN > VLAN Configuration and select there VLAN1 and change Port1-2 to Forbidden and apply:

Now the Status is clear set:

Why we do need this?

A port can only support one untagged membership but multiple tagged memberships! In default configuration all Ports are untag assign to VLAN1. Deeper information’s you can find here.

After configuring the switch you should always save your new configuration on the switch.
Otherwise, the switch will lose the changes after a reboot. 
Switch Configuration Lost After Power Outage or Power Cycle Issue

4. CLI Example

Example Current configuration after adding VLAN (GS2220-28HP):

show running-config
; Product Name = GS2220-28HP
; Firmware Version = V4.70(ABRR.4) | 06/15/2021
no cloud center discovery
vlan 1
  name 1
  normal ""
  fixed 3-28
  forbidden 1-2
  untagged 1-28
  ip address default-management 192.168.1.11 255.255.255.0
exit
vlan 10
  name Guest
  normal ""
  fixed 1-28
  forbidden ""
  untagged 1-2
exit
igmp-snooping unknown-multicast-frame drop
igmp-snooping reserved-multicast-group drop
interface port-channel 1
  pvid 10
exit
interface port-channel 2
  pvid 10
exit
ip name-server 8.8.8.8 1.1.1.1
timesync server 1.pool.ntp.org
timesync ntp
pwr mode consumption

Deeper Informations

If you want to learn / know more about our VLAN design, please have a look here:

VLANs - Tagged VLANs vs. PVID (Setup Example Untagged/Tagged VLAN on a GS22XX-Switch)

VLANs - A deeper look at how they work

Setup Assistance, you´re looking for assisted configuration by our Professional Services Team? Please check here: Zyxel ConfigService Switch