Like every other website on the planet, SmallNetBuilder uses cookies. Our cookies track login status, but we only allow admins to log in anyway, so those don't apply to you. Any other cookies you pick up during your visit come from advertisers, which we don't control.
If you continue to use the site, you agree to tolerate our use of cookies. Thank you!

Router Charts

Click for Router Charts

Router Ranker

Click for Router Ranker

NAS Charts

Click for NAS Charts

NAS Ranker

Click for NAS Ranker

More Tools

Click for More Tools

LAN & WAN How To

Create VLANs

With my planning complete, it's time to create the VLANs. Creating VLANs in the SRW is simply a matter of clicking the "Create VLAN" menu and numbering and naming your VLANs. I'm splitting Voice and Data on this network, yet I'm going to create three VLANs so I can name and fully manage all VLANs in use.

Figure 7 shows my created VLANs (2,3,4). Note that VLAN1 already existed in the SRW's default configuration; this is the VLAN of the management interface of the SRW.

Created VLANs
Click to enlarge image

Figure 7: Created VLANs named appropriately

Map Ports

The next step is to map the physical switch ports to the appropriate VLANs. This is a multistep process, and involves a couple of terms specific to the SRW. The Linksys SRW has several port types for VLANs: Access, General, and Trunk. Other switches may use different terminology, so I'll describe what these terms mean.

Linksys defines Access and Trunk ports similar to Cisco's definitions—which makes sense, as Linksys is a division of Cisco. An Access port is one that belongs to a single VLAN. Frames received on ports configured as Access cannot be modified, and more advanced VLAN port features such as filtering are disabled.

A Trunk port is defined by Linksys as belonging to multiple VLANs in which all ports are "Tagged" with a VLAN ID. Two or more VLAN capable switches can be configured with VLANs, connected together with trunks, and the frames passed between them Tagged by the sending switch to identify the destination VLAN.

I'm using Linksys' port type of General, which allows a port to be a member of multiple VLANs, and have the option of Tagging. I'm going to use the UnTagged option for all VLANs in this example.

Changing a port's type on the SRW is done in the Port Setting menu (Figure 8), and there is a simple drop down selector for each port. I changed all eight ports to a Mode of General, and clicked Save.

General port

Figure 8: Selecting the General port mode

Now that the VLANs are created, and we've configured the ports to allow membership to multiple VLANs, we can assign ports to VLANs. The end result (summarized in Table 1) I want is:

  • Ports 1 and 8 to be members of the Network (2), Data (3), and VoIP (4)VLANs
  • SRW management interface on the Network VLAN 2
  • Ports 2–5 on the Network and Data VLAN 3
  • Ports 6–7 on the Network and VoIP VLAN 4
  1 2 3 4 5 6 7 8
VLAN 1 (Default)                
VLAN 2 (Network) X X X X X X X X
VLAN 3 (Data) X X X X X     X
Table 1: Port to VLAN mapping summary

The quickest way to do this on the SRW is via the Ports to VLAN menu. At the top, you select VLAN. You can't edit any of the settings on VLAN1, so I selected the VLAN indicated as "2, Network." I want all ports to be members of VLAN2, so I changed each port from the default "Excluded" button, to the "UnTagged" button, as in Figure 9.

VLAN2 config

Figure 9: Configuring access to VLAN2

Next, I want ports 1–5 and 8 to be members of the Data VLAN, so I selected UnTagged for those ports for the VLAN indicated as "3, Data," as in Figure 10.

VLAN3 config

Figure 10: Configuring access to VLAN3

Last, I want ports 1 and 6–8 to be members of the VoIP VLAN, so I selected UnTagged for those ports for the VLAN indicated as "4, VoIP," as in Figure 11.

VLAN4 config

Figure 11: Configuring access to VLAN4

More LAN & WAN

Wi-Fi System Tools
Check out our Wi-Fi System Charts, Ranker and Finder!

Support Us!

If you like what we do and want to thank us, just buy something on Amazon. We'll get a small commission on anything you buy. Thanks!

Over In The Forums

Hi all.I am running Merlin 380.70_0 on RT-AC66U A1.From some time 5 GHz module stopped working: the control band is 0, the temperature is "disabled" b...
I've got a bricked router. UART gives on start:Decompressing ... error 1. CTR+C- does not do anything.Any idea to alive device?Thank you!
I found out my speed was down since I was upgraded to 500mb internet, 200mb was the limit due to QOS, guest networks and AI protection to filter the k...
Hey all!Apologies if this is too broad so please let me know and I'll continue on digging down the google/YouTube routes otherwise.Quick Background - ...
Just wondering if anyone is running a pihole on a raspberry pi and with Unbound on there router? Thinking of doing it as I have couple raspberry pi 4 ...

Don't Miss These

  • 1
  • 2
  • 3