How to configure 802.1Q VLAN on L2 Managed switches using the old GUI

A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. Hosts in the same VLAN communicate with each other as if they are in a LAN. However, hosts in different VLANs cannot communicate with each other directly.

Now let´s learn how to configure the tag VLAN on L2 Managed Switches by the following example:

Network Topology:

Here we take TL-SG5428E and TL-SG3424 as an example.

connects to TL-SG3424 with an Ethernet cable in port 1. TL-SL5428E connects to the Internet via TL-R480T+ in port 9.

The computers of Group A connect to port2-3 of TL-SL5428E and port2-3 of TL-SG3424. The Group B connects to port 4-8 of them.

Purpose：

1 The computers from Group A can communicate with each other.

2 The computers from Group B can communicate with each other.

3 The computers of Group A and Group B can’t communicate with each other.

4 Both the Group A and Group B can go to Internet through TL-R480T+

VLAN Configuration parameters:

	VLAN 100	VLAN 101	VLAN 102
TL-SL5428E	1-3,9	1,4-9	1-9
TL-SG3424	1-3	1,4-8	1-8

To achieve Purpose 1, we create the VLAN whose VLAN ID is 100.

To achieve Purpose 2, we create the VLAN whose VLAN ID is 101

By setting VLAN 100 and 101,we have achieved Purpose 3.

To achieve Purpose 4, we create the VLAN whose VLAN ID is 102

Switch	TL-SL5428E				TL-SG3424
Port	1	2-3	4-8	9	1	2-3	4-8
Link Type	TRUNK	GENERAL	GENERAL	GENERAL	TRUNK	GENERAL	GENERAL
Egress Rule	TAG	UNTAG	UNTAG	UNTAG	TAG	UNTAG	UNTAG
PVID	1	100	101	102	1	100	101

The table above shows other parameters.

Now ,let’s start to configure Switch TL-SL5428E:

PARTI: Defining Link Type of ports:

TRUNK: The trunk port can be added in multiple VLANs and used to connect the cascaded network device, i.e. switch to switch. The default egress rule is TAG.

GENERAL: The general port can also be added in multiple VLANs. The default egress rule is UNTAG(Computers usually only accept untagged frames.).

ACCESS: The ACCESS port can be added in a single VLAN ID.

We can define the Link Type according to the second table.To take the port 1 as an example:

We can configure the rest ports in the same way .Finally, we get a table like this:

Part II: Create VLANs:

According to the first table, we need 3 vlans:VLAN100,VLAN101,VLAN102.

Please go to 802.1Q VLAN->VLAN Config and click Create button. In the new pop-up window, we can create a new VLAN like this:

Similarly ,we can accomplish the configuration of the other 2 VLANs and we will get.

Part III: Setting PVID

PVID(Port VLAN ID) is the default VID of the port. When the switch receives an un-VLAN-tagged frames, it will add a VLAN tag to the frame according to the PVID if its received port and forwarding the frames.

For example, the PVID of port 2 is 100.When the port 2 receives a frame from the PC(untagged),the switch will tagged the frame with VLAN ID 100 according to the PVID of port 2.So the frame will only be forwarded to the ports of VLAN 100.

We have already accomplished all the setting so far. But don’t forget to go to Saving Config to save the settings.

Configure Switch TL-SG3424

We can configure the TL-SG3424 in the same way according to the Table 1 and Table2.

Now, the network will work as described in Purpose.

Get to know more details of each function and configuration please go to Download Center to download the manual of your product.