Description
VLAN is abbreviation from Virtual Local Area Network, which is any broadcast domain that is partitioned and isolated in a computer network at the data link layer. VLANs are identified by a VLAN ID (a number between 0 – 4095), with the default VLAN on any network being VLAN 1. Each port on router can be assigned to be a member of a VLAN. A VLAN tag is included in the header of every frame sent by an end-station on a VLAN. The default VID for a port is referred to as the Port VID (PVID).
As network scale, and in order to segment traffic for performance, security and logistics reason, it is necessary for Milesight to introduce multiple broadcast domain on the UR router. This chapter will discuss about the VLAN feature on the router and how it works.
Topology
Requirement
-Milesight UR35/UR75 router
-2 computers
Configuration
Step1：Enter to Network->interface->Switch, Click “+” in VLAN Setting, fill in the VLAN ID
Tag LAN3, LAN4 and untag LAN1, LAN2 for the VLAN1
Tag LAN1, LAN2 and untag LAN3, LAN4 for the VLAN2
Click “+” in LAN setting, fill in the Name, select the VLAN ID you added in VLAN setting.
Set the IP address as 192.168.3.1, netmask 255.255.255.0 for the VLAN3;
Note: VLAN ID 1 and 2 are reserved, please add VLAN ID start from 3.
Description:
The Port VID for the port LAN1/2 is VLAN 1, and the Port VID for the port LAN3/4 is VLAN 3;
On receiving a untagged frame from the LAN1/2, the router identifies as VLAN1, then tag the VLAN1 for the frame, after processing by the CPU, the tag would be removed.
On receiving a tagged frame from the LAN1/2, the router inspects the frame header and, based on the VLAN tag, identifies the VLAN. If the VLAN ID is 3, then forward to CPU to process; If the ID isn’t 3, the router would discard the frame.
Step2: Set computer A Ethernet adapter's TCP/IPv4 Properties to obtain IP address automatically, or use 192.168.3.100 as IP address, 255.255.255.0 as netmask, 192.168.3.1 as gateway address, then connect the computer to LAN3/4 port of router.
Set computer B Ethernet adapter's TCP/IPv4 Properties to obtain IP address automatically, or use 192.168.1.100 as IP address, 255.255.255.0 as netmask, 192.168.1.1 as gatewayaddress, then connect the computer to LAN1/2 port of router.
Step3: Check the routing table as below, the network segment 192.168.1.0 and 192.168.3.0 are direct connect.
Step4: Ping PC A(192.168.3.100) from PC B(192.168.1.100) and it successes.
