A Virtual LAN, or VLAN, is a network of computers that behave as if they are connected to the same wire even though they may be physically located on different segments of a LAN. You set up VLANs by configuring the Gateway software rather than hardware. This makes VLANs very flexible. An important advantage of VLANs is that when a computer is physically moved to another location, it can stay on the same VLAN without hardware reconfiguration. VLANs behave like separate and independent networks. The router will support up to 32 VLANS.

Please Note: If your router is currently running Netopia Enterprise Firmware version 8.0.10 and later, this technote is not applicable to you.

Related documents: CQG_145 VLANs

Firmware Reference

• v7.4.2 and later -- Netopia 3300 VGx Series

Before You Start

Browse into the Netopia's web interface at http://192.168.1.254 (if using the default IP setting). If your network has a different IP addressing scheme, modify this accordingly.

Login with the admin user name and password. Admin login is required to save changes. If you are unsure of this, contact your network administrator.

Once logged in, click on the Expert Mode link in the left-hand side menu (if that link is visible). In the Expert Mode Confirmation screen click on Ok to continue. This menu bar will be visible at the top of your screen if you are in Expert Mode.

Remember to click the button to save any entries. Hitting the back button without clicking will undo any changes.

Once you have completed your configuration, click on the symbol in your upper right hand corner to validate the changes. Then click on Save and Restart.

The Netopia Web GUI Home Page in Expert Mode (Firmware v6.3 and later)

Configuration

1. In the upper menu bar, click on Configure.
2. Click on Advanced.
3. Under the Miscellaneous heading, click on VLAN.

   

4. When you click the VLAN link the VLANs page appears. If no VLANs are configured, the VLANs page displays no entries.
5. To create a VLAN, click on Add. The VLAN Entry page appears.



• VLAN ID - This must be a unique identifying number between 1 and 4095. In this example we will select the number 1.
• VLAN Name - A descriptive name for the VLAN. In this example we will make it the word WIRED.
• VLAN Protocol - This field is not editable; you can only associate ports with a VLAN.
• Admin Restricted - If you want to prevent administrative access to the Netopia Gateway from this VLAN, check the checkbox.
6. Click Submit once you've made your changes. The VLAN Port Configuration screens appears.



7. For Netopia VGx technology models, separate Ethernet switch ports are displayed and may be configured.
8. Port interfaces available for this VLAN are listed on the left hand screen. Displayed port interfaces vary depending on the kinds of physical ports on your Gateway, for example, Ethernet, USB and/or Wireless. Also, if you have a wireless unit and you have multiple wireless SSIDs defined, these may be displayed as well.



9. To enable any of them on this VLAN, select one, and click the Add button. Typically you will choose a physical port, such as Ethernet port or a wireless SSID, and make the port routable by specifying lan-uplink.
10. If you want to create more VLANs, click on the Advanced link (in the left-hand toolbar) and then the VLAN link in the resulting page, and repeat the process.
11. Once you have input all appropriate information, click on the symbol in your upper right hand corner to validate the changes.
12. Click on Save and Restart.
13. At this point the router will reboot.

Example VGx VLAN Configuration

Example #1:

Objective is to configure a 3347W-VGx router with two SSIDs for two VLANs, allowing both access to the Internet. One SSID will be in the same VLAN as the Ethernet Switch, so that those two networks can communicate. The second VLAN will be for the other SSID. The second VLAN will also be denied access to the 3347W-VGx web interface and telnet interface. (This kind of setup might be useful if you have a Doctors office, or a coffee shop, and you want to keep your customers separated from the rest of the network.)

1. In the VLAN ID box enter the unique number for this VLAN. In this example it has been set to 10.
2. In the VLAN Name box, enter the name you would like. Here we will call it Network A.
3. Since this VLAN will be for SSID1 and Ethernet Port 1, we will leave Admin Restricted unchecked. This will give this VLAN access to the router.
4. Submit.
5. Here you add the Port Interfaces you want associated with the VLAN. In this case, add lan-uplink, ethernet1 and ssid1.
6. Submit.
7. Again, click on Add in the VLAN box to configure the second VLAN.
8. The VLAN ID has been given a different ID than the previous VLAN. Here we have given it 20.
9. VLAN Name has been given another unique name. In this case Network B.
10. Since this is for the second SSID that we donÕt want to be given access to the router, Admin Restricted has been checked.
11. Submit.
12. Here, add both the lan-uplink port interface and the ssid2 port interface and Submit.
13. Once you have finished with the configuration of the VLANs, click on the in the upper right hand corner. This will validate that the settings are legal for your network
14. Click on Save and Restart. This will restart the Netopia and retain the VLAN configuration.

Example #2:

Objective is to keep each VLAN from communicating with one another.

• Digital Video Recorder(DVR) plugged into port 1.
• Server plugged into port 2.
• Switch plugged into port 3.

1. In the VLAN ID box enter the unique number for this VLAN. In this example it has been set to 2.
2. In the VLAN Name box, enter the name you would like. Here we will call it DVR.
3. Admin Restricted will be left unchecked. Submit.
4. Here you add the Port Interfaces you want associated with the VLAN. In this case, add lan-uplink and ethernet1. Submit.
5. Again, click on Add in the VLAN box to configure the second VLAN.
6. Continue to add two more VLANs, each with a unique ID and Name. One will need lan-uplink and ethernet2, the other with lan-uplink and ethernet3.
7. Once you have finished with the configuration of the pinholes, click on the in the upper right hand corner. This will validate that the settings are legal for your network.
8. Click on Save and Restart. This will restart the Netopia and retain the VLAN configuration.

Please Note: To make a set of VLANs non-routable, the lan-uplink port must be included in at least one VLAN. It must then be excluded from any VLANs that are non-routable. The VLANs that have this excluded will not only be prevented from accessing the router or getting out to the internet, they will not obtain an IP address through DHCP on the router. If you want to allow them these privileges the lan-uplink option will need to be added.

By default if the VCC1 option (in this case PPP over Ethernet VCC1) is not added to any VLAN, all users will be able to get out to the internet, unless of course the lan-uplink has been removed. If you add the VCC1 interface to a VLAN, only that VLAN will be able to get online, while the rest will be restricted.

Conclusion

You've now configured your Netopia Router for VLANs. Be sure to restart the router for these changes to take effect.