Managing Tagged and Untagged VLAN IDs on the WAP131

Objective

A VLAN (Virtual Local Area Network) is a switched networked that is logically segmented by function, area, or application, without regard to the physical locations of the users. VLANs have the same attributes as physical LANs, but you can group end stations even if they are not physically located on the same LAN segment.

The management VLAN communicates with the main switch interface and has a default VLAN ID of 1. A tagged VLAN between a trunk port and a switch port contains the VLAN information in the Ethernet frame. The untagged VLAN is enabled to send traffic without the VLAN tag. The VLAN tag contains a Tag protocol identifier, and Tag control information, which can be further broken down into other bit fields such as a VLAN identifier. To add more security to the network, your network configuration must include a secured management VLAN.

An attack on the management VLAN can compromise network security, so changing the management and untagged VLANs to something other than the default is recommended. Both the managed and untagged VLAN IDs on the WAP131 access point are configured to VLAN 1 by default.

The objective of this article is to configure management and untagged VLAN IDs on the WAP131 access point.

Applicable Devices

• WAP131

Software Version

• 1.0.3.4

Global Settings

Step 1. Log in to the Access Point Configuration Utility and choose LAN > VLAN Configuration. The VLAN Configuration page opens:

Note: The MAC Address field displays the MAC address of the Ethernet port on the WAP131. The WAP131 has only one Ethernet port.

Step 2. (Optional) To allow the device to receive traffic that is not tagged for a VLAN, check the Enable check box in the Untagged VLAN ID field. This function is used when there is a LAN port connected to a switch port that has a VLAN marked as untagged.

Note: If you did not enable an untagged VLAN, skip to Step 4.

Step 3. Enter the VLAN ID (between 1 and 4094) for the untagged VLAN in the Untagged VLAN ID field. The default ID is 1. The traffic that goes through this VLAN is not tagged and is forwarded to the network. This should be the same VLAN that is marked as untagged on the switch port.

Step 4. Enter the VLAN ID (between 1 and 4094) for the management VLAN in the Management VLAN ID field. The Management VLAN needs to be the same as the one on the switch to which the WAP is connected. For security purposes, the management VLAN ID should be changed from the default of 1 to something else.

Step 5. Click Save to save the settings.

Note: Note: To learn more about configuring IPv4 Settings, refer to the article IPv4 Settings Configuration on the WAP131 and WAP351 Access Points.