VLAN question

[VANT]

Hello.
Quick question about Asus VLAN implementation.
I have RT-AX86u Pro, and three switches (managed)

Now my main network have 192.168.17.x addreses, and i need to add vlan.
If i add vlan 20 i see this vlan in vlan profile, but main network is not visible.
If output port (lan) is configured as tagged with all vlans
So the question is, is the main network is tagged if I don't see it in profiles? I want to configure the external switch to correctly recognize vlans, and for this I need tagging. Unfortunately, I cannot change the address in the main network.
thanks

 

[eibgrad]

I don't have access to this new feature, but just speaking logically …

The untagged VLAN is typically considered the default. And by definition, there can only be one. Doesn't mean you can't tag it if you wish, but normally it is NOT. Most any VLAN utility is well aware of the above, so I would expect it to display both tagged and untagged VLANs.

Might be helpful if you posted what you're looking at, esp. since not everyone has access to this feature.

 

[VANT]

I'm more interested in whether the main network will be available in a different vlan? Currently, all ports on the switches are set to vlan 17 and even though the main network is not tagged, everything works fine. If I add vlan 20, won't I see the main network on the ports in that vlan?

 

[PunchCardBoss]

I want to configure the external switch to correctly recognize vlans, and for this I need tagging.

Here is an example of setting up an 8-port managed network switch...

This configuration is for one of my 3 Netgear switches. This switch (a GS308T 8 Port Plus L2 Switch) configures port #6,7,& 8 as VLAN 99. Ports 1 through 5 are for the default router LAN subnet. As you can see, the numeric "1" represents the default subnet.

Switch Port #1 is connected to my AX88U-PRO.
LAN > VLAN > VLAN is configured as follows for the connected router LAN port number:

• Mode: "All(Default)"
• SDN (VLAN) Profile: Default

LAN > VLAN > Profile for VLAN 99 is marked as "Port Isolation"

This configuration isolates devices connected to switch port #6,7,& 8 on VLAN 99 from all other devices on my LAN, yet allows internet access. In other words, a device on switch port 7 can't access a device on switch port 2, but has access to the internet gateway through switch port #1.

 

[PunchCardBoss]

I'm more interested in whether the main network will be available in a different vlan? Currently, all ports on the switches are set to vlan 17 and even though the main network is not tagged, everything works fine. If I add vlan 20, won't I see the main network on the ports in that vlan?

I believe that is the purpose of the "T" designation in my example for VLAN tagging - for traffic to/from the router. I could be wrong - it has been a while since I played with my example switch config.

 

[VANT]

Main assumption. I don't want the main network (not tagged) to be visible in vlan 20