TP-Link Switch VLAN Setup - Tagged vs Untagged Ports 

OMG!OMG!OMG! A 10 minutes video which would surely have saved me 3 sleepless nights!! Nobody could have explained it better! A simple network design, for the home use (start of a home lab, maybe?) in which the main focus is to clarify important networking terminology (so useful for future reference!!!) which nobody does anymore....not even excellent technical youtubers like Lawrence Systems, David Bombal, Network Chuck...Great job! spent as a new comer in the networking field 3 nights trying to configure a vlan on a cisco switch, reading documentation, watching videos and still failing. Trunk or access that is pretty straight forward to understand but tagged or untagged that was a whole another story for me..

After a lot of research on the internet, it seems that this video clearly and concisely explains the concepts of tagging and untagging. Thanks!

As a total beginner to networking who is better with visuals, your explanation along with your diagrams has helped out so much! Vlans now make significantly more sense than they did before. thank you!

THANK YOU. I couldn't find any TP link config guides that could explain this to me. Your video helped this click after a couple hours screwing with it.

Before buying the switches I wanted to confirm if I could use VLANs and tagged & untagged ports. Thanks for the video!

Just wanted to give a shout out to you on this video because I simply did not understand tagged/untagged on the TP switch. Now I do. I was able to FINALLY connect my pfsense vlan to the switch and have two separate networks. Thanks.

I was banging my head against the wall with this - and this video cleared it up for me. Thank you!

Thank you for this video! I've been hitting my head against a brick wall... I had no idea about the 802.1Q VLAN PVID Setting

Thanks for the very clear video on how to do the VLAN on this TP-Link Switch. Now fully understand

The best work I saw after watching many videos around this topic! Hat's off!

Thank you for this vid, I was trying to wrap my head around how tp-link vlans work, but coming from unifi, i wasn't getting very far!

Best guidance I've found is this: If it's untagged the switch will add the tag (Switch requires both 802.1Q VLAN and 802.1Q PVID to be completed) If it's tagged the switch expects the VM/hypervisor/firewall to have already tagged it (Switch requires ONLY 802.1Q VLAN to be completed)

ive tried to learn this for some time now. and finally now i get it! :)

OMG, Gathering Fooling around for a few day's and Never Connected the PVID setting to be mandatory to untag ports. I'm Trying to get a simple OPNsense to use port 1,2,3,4 as "LAN" ports, and port 8 as WAN port of my TP-Link switch. Exactly at the moment you pointed out to the PVID section. I hit my keyboard with my face... Untagged the ports and the WAN ports are working LoL Thank you very very much 🙂this is what i needed for a low-budget project....

Amazing. This exactly what I was looking for. Big thank you!

Thanks for this. I totally failed to see the PVID section and i couldn't figure out why my untagged VLAN wasn't working properly. Why they didn't just combine the 2 sections into one I'll never know.

Exactly what I was looking for.

Thank you for the video. Would it have been possible to make the modifications on the main switch and avoid having a secondary switch?

Hey man, great video. thanks for the help. In my case I am still a bit confused, not by this, since I got this working with your help. My issue is that now that everything in the vlan is working I am confused as to how to access it from my main network. In this case I have all my IoT devices in vlan 107, whille the guest network is in vlan 50 and the TVs are in vlan 78. I have a NAS used as a server in the main LAN used for backups and as a plex server. I want to be able to access some of the IoT devices from my PCs, as well as being able to access the Plex server from the TVs. Could you help me out as to how to do this on a TPlink switch please? I have an asus RT-AX88U router.

Thx for a insightful video. Not using Omada software controller as not compatible with TL-R470T+ at this time but want to secure IOT devices. Using 3 EAP235 AP's whose ports are hardwired to TVs and gaming consoles along with standard wifi access for multiple IOT devices. Can those AP wired ports have VLAN assignments( thinking yes )? Is that done via the AP interface or would using the Omada software controller be a better approach?

@Klaro Tech, Question for you: My home is pre-wired with ETH ports on the wall of my rooms and my Living room is going to have an AP power over ETH 2.5G port. My Main switch is an M2 switch doing L2/L2+ functionality and has 8 PoE ports. At my Onq panel (which has my controller/router/switch) all my ETH terminates at the 8 port poe switch. Now, if i connect my AP from the wall port then I dont have any other ports to wire my Iptv and PS4. If i want to also have them wired, can i use a dumb switch (switch 2 per your diagram) with Poe capability and has 2.5G, and use port 2 to connect to my AP and Port 3 & 4 (untagged in same VLAN) to my iptv & PS4? will my ipv4 and PS4 be part of VLAN as untagged but will still get wired connectivity?

Is it possible to plug unmanaged or ordinary 16 port hub to untagged port on vlan switch and then connect all the computers on that ordinary 16 port hub? Does it still control the traffic on all the computers plug on that ordinary hub? Set up is like the 16 port ordinary hub connected to the 1 port of untagged vlan port, then all computers connect to the ordinary hub.

Many thanks for the clear and concise presentation. One point of confusion for me is that in TP-link's user manual for another switch model: TL-SG1016PE, it shows a configuration use example where both the untagged and tagged ports are assigned PVID settings. I couldn't link it here, but it is on page 38 of the TP-Link TL-SG1016PE manual. I don't know if this is a mistake on their part or if I misunderstood the config example. Are there any situations where a tagged port would also have a PVID setting?

Some models of TP-Link switches and access points don't handle VLANs and multicasts properly. They allow the main LAN multicasts to leak into the VLAN. As a result, I could not run IPv6 on my guest WiFi VLAN. Later versions of the firmware may have fixed this, but I don't know for certain. I replaced the TP-Link AP with another make, which runs fine with IPv6.

For my two access points, they both have 'staff' SSID, and 'guest' SSID. I have enabled VLANs for both 'staff' and 'guest' , where 'staff' VLAN = 1, 'guest' VLAN = 20. Therefore, for the ports of the access points on the switch, I have enabled 'tagged' for both VLAN = 1 and 20. This seems to work but its not the way you did it? Also, if I make the switch port which my router is connected to, 'tagged' VLAN = 1, then i lose all connection and internet on my laptop

Tagged for all data passthrough while untagged for VLAN only. My understanding is reverse. Thank you for the information coming from the Philippines.

I am not very good at networking but I can follow directions very well. I have tplink Archer_A9 acting as a WiFi router and a couple of ASUS old routers acting as AP and repeater. I also have this switch that’s in the video and would like to put my ioT devices in a vlan network. Can I do it with these devices in mind? If so would you be willing to make a video showing how to do it using the switch you showed in the video?

Thanks for the video, very useful. I have found a lot of unmanaged switches do allow tagged data through, all TP-Link switches have 802.1Q pass through. If I set PVID to 5 on all ports, can I assume the default VLAN 1 for untagged ports is overridden? I dont want anyone who plugs in to the switch to automatically be allowed onto the Management Lan. If I did that I assume the switch itself would have a tag of 5 when it communicates to the next switch?

4:14 What if my router doesn't support VLAN? Can I connect this switch to my non-VLAN router and then all my equipments to the switch? Will I be able to use only the VLAN on the switch? Thanks!

since you have VLAN 1 untagged on ports 1-8 wouldn't there be a conflict on port 3 with also having VLAN 10 untagged?

So in order to use vlan .. Two managed switches are required ?

At 6:00, what is VLAN 10 on router? and what kind of tp-link router?

Hi, I have a question. Can I create multiple Vlans on one switch and connect it to an Access point with multi SSID?

Much better explanation how to create vlan.. i thought tagged port is the vlan.

How do you setup the switch, so that one can access the switch over a TRUNK PORT, like all my other switches. For example I have the TPLINK behind another switch. On the trunk port from this other switch, goes into PORT on the TPLINK and carries vlans 10 and 50. We assigned an IP address on the vlan10 subnet (trusted). Ports 1-4 are going to dumb devices on vlan50. Ports 5-7 are going to dumb devices on vlan10. My setup. PVID: ports 1-4 =50, ports 5-7 =10 port 8 = 1 ( no change, default of 1 kept). My setup. Membership vlan 50, Ports 1-4 Untagged / port 8 tagged ............ vlan10, ports 5-7 tagged / 8 tagged My setup. Membership vlan1, port - untagged. Thus port 8 is a classic trunk port with two vlans coming in and 7 ports are access ports 1-4 members of vlan50 and 5-7 members of vlan 10 From another computer attached to the main router on vlan10, I cannot reach or ping the TPlink switch, with IP address on the same vlan. I can confirm that traffic to the switch prior to the TPLINK gets all the vlans correctly from the MAIN router. Baffled!! Just to compare, I have four vlans going to Main Switch from Router (trunk port to trunk port all tagged vlans). From the main switch two vlans go from main switch to tplink on a trunk port 2 tagged vlans on both sides. Please explain on the MAIN switch how you reach the Main switch, From a PC connected to the router on vlan10?? Same with second switch, how do you access the switch to configure it, if the pc connected to your router is on vlan10?? Note. When you assign a PVID to an access port going to a dumb device, you should be untagging vlanid=1 from that port as well.

Всё чётко и понятно. очень помог. Спасибо!!!

Tagged, what's it tagged with ?

thanks!

Thanks

I segragatex the IoT, due to their inheent security risks. The tvs was done because my cable provider gives me android boxes with who know what software is in it, so that is the reason. The only issue I am having is when I try to access plex thru my tvs locally, I am getting sent to the internet and back and with only a 100 mb service I get choppy video all the time.

VLANs can go through dumb switches. I've done it. A dumb switch doesn't have the intelligence to filter out VLANs, so it will pass the tagged frames, but will not affect them.

This is really annoying. Never have i seen having to pvid a port and not just select it as untagged on 802.1q. I've wasted in total probably 12h on issues caused by this as they are located in different buildings.

7:32 incoming and outgoing. This is not god terminology to use when teaching this because things can come in and out of every port.

Your video title is in SPANISH? Really? Please dont doit... I need content in my lenguaje, not english.

I lose internet connection when I do the PVID for lets say port 1 and port 5 untagged. why? trying to setup cameras and router , separate the traffic but i have a testing systems PC on port 1 and 5 and when i PVID , port 5 loses internet , 1 still has