# VLAN

## VLAN Configuration (bridge mode)

The parameters in this page are only active when VLAN is enabled (see Home->Basic Settings->VLAN Mode)

### Mode

Select the VLAN mode of operation

Untagged: Devices on this interface are not using VLAN tags. Incoming (ingress) packets are tagged with the port VLAN ID (PVID). VLAN tags are removed on outgoing (Egress) packets. See the "Advanced Settings" section for more options.

Tagged: Devices on this interface are using VLAN tags. Incoming (ingress) packets are forwarded with their VLAN ID. Outgoing (Egress) packets are also keeping their VLAN tags. See the "Advanced Settings" section for more options.

### Port VLAN ID

Set the port VLAN ID (PVID)

### Member Of Management VLAN

When the "Management VLAN" is enabled, user can access the internal functions of the Viper (HTTP, FTP, Command Shell) through this port if "Member of Management VLAN" is enabled. This is true only for ports of type "Tagged". Ports of type "Untagged" can always access the internal functions of the Viper (HTTP, FTP, Command Shell).

### Advanced Settings

Change the advanced settings (the default actions are highlighted).

UNTAGGED PORT MODE
Ingress Packets (Packets Entering The Interface)
Packet Type | Action
Untagged (The packet has no VLAN ID tag) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID=0 (The packet has a VLAN ID set to 0) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID=PVID (The packet has a VLAN ID equal to the PVID) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID!=PVID (The packet has a VLAN ID not equal to the PVID) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
Egress Packets (Packets Leaving The Interface)
Packet Type | Action
Untagged (The packet has no VLAN ID tag) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID=0 (The packet has a VLAN ID set to 0) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID=PVID (The packet has a VLAN ID equal to the PVID) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID!=PVID (The packet has a VLAN ID not equal to the PVID) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag

TAGGED PORT MODE
Ingress Packets (Packets Entering The Interface)
Packet Type | Action
Untagged (The packet has no VLAN ID tag) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID=0 (The packet has a VLAN ID set to 0) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID=PVID (The packet has a VLAN ID equal to the PVID) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID!=PVID (The packet has a VLAN ID not equal to the PVID and the packets VLAN ID is in the VLAN Member Table) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID!=PVID (The packet has a VLAN ID not equal to the PVID and the packets VLAN ID is not in the VLAN Member Table) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
Egress Packets (Packets Leaving The Interface)
Packet Type | Action
Untagged (The packet has no VLAN ID tag) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID=0 (The packet has a VLAN ID set to 0) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID=PVID (The packet has a VLAN ID equal to the PVID) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID!=PVID (The packet has a VLAN ID not equal to the PVID and the packets VLAN ID is in the VLAN Member Table) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag
VID!=PVID (The packet has a VLAN ID not equal to the PVID and the packets VLAN ID is not in the VLAN Member Table) | Silently drop packet Keep packet unchanged Retag packet with PVID Tag packet with PVID Delete tag

## VLAN Configuration (router mode)

The parameters in this page are only active when VLAN is enabled (see Home->Basic Settings->VLAN Mode)

### Ethernet, Virtual 1, Virtual 2, ..., Virtual 5

Configure the VLAN parameters of the interface

PVID: Setting the interface PVID to 0 will let it operate like it was a regular interface without VLAN tagging. This is so that some interfaces operate in VLAN mode and other in regular mode.

Mode (Untagged): Devices on this interface are not using VLAN tags. Incoming (ingress) packets are tagged with the port VLAN ID (PVID). VLAN tags are removed on outgoing (Egress) packets.

Mode (Tagged): Devices on this interface are using VLAN tags. Incoming (ingress) packets are forwarded with their VLAN ID. Outgoing (Egress) packets are also keeping their VLAN tags.

Member Of Mgmt VLAN: When this parameter is set, external applications can access the device internal applications (HTTP server, FTP server, etc) by using the IP address (and if set, the PVID) of this interface. This parameter is only active in router mode.

Note: An IP packet received on a LAN interface with a PVID will be routed inside the Viper network with its VLAN tag attached to it (if the ingress interface is an untagged interface, the VLAN tag following the packet with be the interface PVID). The IP packet plus its VLAN tag will be used for VRF routing.

VRF mode: This mode is on when router mode and VLAN mode are active. Each IP packet will be forwarded inside the Viper network with their original VLAN tag. When it comes time to select a default route for a packet, preference will be given to the gateway that is on the interface with the same VLAN tag (PVID).