VLANs Made Easy: Learn This Today!

Confused by VLANs? You're not alone! "VLANs Made Easy" is here to demystify one of the most baffling topics for both novices and seasoned network admins alike.
In this video, we tackle everything from the basics of what VLANs are, to setting them up across various types of networking equipment. Whether you're looking to isolate your guest network, secure your IoT devices, or simply organize your network infrastructure more efficiently, this tutorial has got you covered. With hands-on demonstrations, including the setup on both consumer-grade and enterprise-level equipment, you'll gain the confidence to implement VLANs in your own network environment.
Check out Rogue Support here:
Rogue.Support
And sign up to become a Rogue Support Referral Partner - now accepting limited sign-ups:
Referral Partners: rogue.support/referrals
#Vlans #ComputerNetworking #NetworkSetup #VlanEfficiency #CidrFormat
CHAPTERS:
0:00 - Intro
1:31 - LAN Basics
4:36 - VLAN Fundamentals
10:13 - Untagged VLANs Explained
12:47 - Tagged VLANs Overview
14:30 - Trunk Ports Introduction
16:07 - VLAN Real-World Examples
17:01 - Trunk Port Practical Example
19:44 - Untagged VLAN Real-Life Application
21:13 - Enhancing Security with VLANs
22:54 - VLANs in Wireless Networks
25:06 - UniFi VLAN Configuration
31:26 - Mixed Equipment VLAN Setup
34:03 - Synology RT2600ac VLAN Setup
34:14 - Aruba 1930 VLAN Setup
36:27 - VLAN Testing
40:05 - Conclusion
--------------------------------
Buy me a coffee! ko-fi.com/crosstalk
Crosstalk Discord: / discord
Follow me on:
- Twitter: / crosstalksol
- Facebook: crosstalksolutions
- Instagram: / crosstalksolutions
- TikTok: / crosstalksolutions
- LinkedIn: goo.gl/j2Ucgg
Crosstalk Solutions - RECOMMENDED PRODUCTS: crosstalksolutions.com/recomm...
Amazon Wish List: a.co/7dRXc67
Crosstalk Solutions offers best practice phone systems and network/wireless infrastructure design/deployment. Visit www.CrosstalkSolutions.com for more info!

[@simonlockdk]

Very good video. Now a video about firewall rules for the vlans. For example how to stream from your secure vlan to the iot lan. How will the Sonos app act on a phone vlan when it needs to stream to the iot vlan and the homeassistant app the same way. 😊💪🏼

[@johnpoldo8817]

After watching several YT’s on VLANS, I give kudos to Chris for doing a better job than all the others combined. Historically, I sparingly used vlans due to weak knowledge. Now, I’ll use them more. His examples and analogies are superb. It’s so good, I watched it twice.

[@hottractor1999]

I find one the biggest points of confusion people have about a layer 2 VLAN is that they think it is synonymous to a layer 3 Network. One can have multiple VLANs on the same piece of wire. One can have multiple layer 3 Networks on the same piece of wire. One can have a VLAN with multiple layer 3 Networks and vice versa they are independent of each other.

[@mikelambert4490]

Thank you! VLANs are virtual broadcast domains.

[@Douglas_Gillette]

@@mikelambert4490Bingo

[@1Neff1]

Help

[@sarpuser]

Honestly the best explanation of VLANs I have seen, especially the difference between tagged and untagged VLANs. Saved me days of going back and fourth on a help forum

[@stspringer2003]

Greatest video I ever saw on KZbin. You are the most articulate person I have ever encountered on a complex subject like this. I found you by accident and I will continue with your other videos. I wasn't even looking for a Vlan video but I really did understand 80% of what you talked about. You made a place on my google Drive :) Thanks much

[@jasonlittle6542]

This met me right where i needed. There are plenty of videos on either side of the subject. Either they're too high level, just explaining the concept of VLANs, or too fine grained, for those who already were very familiar with all the terminology and just needed to know a specific ecosystem. This one video bridged the gaps in my skillset perfectly! Thank you!

[@fv2077]

This is hands down the best VLAN explanation video I have ever seen 🤩. Thanks to this video I finally have a full understanding of VLANs. 🥳

[@theLEFTY15]

Would love a follow up video on firewall rules and making sure cloud and local only devices work properly across the vlans. Thanks Chris!

[@-tsvk-]

You never AFAICR explicitly mentioned it to drive the point home, but: without VLANs, to achieve the same logical separation of networks, the networks need to be physically separated (dedicated cable runs and switches for each network so that the packets of two networks "never meet"), and that the whole point of VLANs is that there is only one physical network needed, where the separation of the logical networks is achieved "in software" by having the VLAN-aware routers and switches enforce on port-level the logical separation, based on the VLAN tags of the network packets that pass through.

[@conrat2000]

I wish you had made this video 5 years ago. Great job, sir! Thank you.

[@kolrising]

As someone who knew almost nothing about VLAN's, this video was super informative. Thank you!

[@KindaCharming]

I’ve been doing small to medium business sysadmin & networking for over 20 years and always got by with larger subnet blocks. I just now am needing to learn VLAN stuff. This helped significantly. Thank you for taking the time to do this!

[@mike.walker]

Possible update to the beginning - show 4 switches as the "old school" way we would segregate networks physically for each dedicated usage (maybe use different colours of cables for each). Then show a single "VLAN-enabled" switch with all of those cables plugged into it.

[@madezra64]

This right here. Visually showing what VLANs are logically doing is a great teaching tool.

[@kingredleg6747]

I new nothing about routers and switches. Now I feel confident about using them. This is a well laid out video. Thank you very much.

[@CrosstalkSolutions]

Cheers - glad it was helpful!

[@Mekk_Mekk5]

Well explained video, would love to see an extensive video with firewall rules using vlan

[@conrat2000]

I would love a video explaining layer 3 vs layer 2.

[@fcecamor]

This is one of the most well done VLAN instructional videos I have ever seen. Is there any chance you can make a tutorial for Chromecast Multicast DNS over VLAN with Ubiquiti? Something that should be easy but never works as expected.

[@krismerchant4982]

Thank you so much. You are a great teacher. I've learned so much from you these past 3 years. Your customers must love you.

[@thedarkwolf25]

I knew a little about VLANs, but often got confused and had to double check on things, this explanation made it much easier to understand and I'm not going to have any issues remembering this. Fantastic content as always!

[@jamessapp4679]

Excellent presentation. Lots of work went into making this video.

[@CrosstalkSolutions]

It did actually...not an easy topic to tackle!

[@BrentCameron]

@@CrosstalkSolutions This video should be shown in colleges and high schools for the younger generation to get exposed to networking concepts and terminology.

[@julianelpro5513]

How does the IP phone know that needs to ask for VLAN 30 only? Great video as always!!!

[@brightmanfan]

It's probably manually setup with a static IP address in the "30" VLAN range

[@DJNateSheer]

@@brightmanfanno he said it gets an ip address

[@Zak_Hooi]

it will option to define a VLAN in its settings, otherwise it will (if defined) use the untagged vlan.

[@buzzzz1252]

Excellent video! Glad you showed UniFi and then also a hodge podge of equipment as well. I am all UniFi here and have noticed my Flex-Mini is VLAN aware and configurable, but like that router you showed, if you configure a port as Native to a VLAN (not 1/default), you can't have tagged traffic.

[@tarcisio_menezes]

I was confused about untagged and tagged ports. Not anymore! Thank you so much!

[@blueline15]

Hey Chris, great video. As someone who’s been networking for years and been the IT guy for the small companies I’ve worked for, I have set up and use VLANs, but this video did a great job clarifying and simplifying the topic, I feel more confident in my approach now. I’ll refer others to this when I see vlan questions on Reddit. Good job!

[@misku_]

Superb! 👏 I have finally properly understood setting tagged vs. untagged VLANs on ports. It's the best explanation I have ever come across so far with multiple real world examples. Very informative video. Kudos and thank you! 🌟 Keep up the good work.

[@ipgucker]

Selten haben so gute und anschauliche Erklärungen gehört. Wirklich ganz hervorragend! Vielen, vielen Dank!

[@theLEFTY15]

Bless you for this video!! Been waiting for this one for awhile. Thank you!

[@ITMRM]

This is so comprehensive and I learned so much! I may need to watch this a few times to fully comprehend it but that is okay by me. In a mixed environment scenario where you may not know what is plugged into what, how would you go about identifying hardware? Would I use something like Nmap?

[@madezra64]

Very well explained. The biggest thing to get across to people is the difference between TAGGED and UNTAGGED. By switching UNTAGGED with DEFAULT, and TAGGED with OPTIONAL or/ ADDITIONAL, things start to become very clear very quickly.

[@hugoapresname]

Thank You especially for the practical examples on how to configure at the end.

[@kevinrtres]

Very well presented. Easy to understand and actually USE! Thank you.

[@davidsaaed4602]

Great video. Do you have any videos on VLAN and firewall settings on a UDM for PCI compliance?

[@sygad1]

thanks for that, helped me understand vlans and tagging in the unifi, especially the new interface, a little better

[@BrentCameron]

One of the things that I absolutely LOVE about Macs is that they have built in functionality to understand VLAN's when given a trunk port by a switch. Even my 20 year old PowerMac G5 has this capability! In System Preferences you add the VLAN ID's and give the ethernet "profile" a name. Add as many VLAN interfaces on you Mac as you have VLANS's. So some of my Mac's have 10+ IP addresses all with using a single ethernet cable. No inter VLAN routing required as the computer is on all the networks at the same time and the traffic stays on the Layer 2 switch.

[@user-mx5cf6iz2r]

coul you expand on that just a bit, thx

[@BrentCameron]

@@user-mx5cf6iz2r Make sure your Mac is plugged into a trunk port on your switch. By default, your Mac will get an IP address in the untagged VLAN 1 "default" or management LAN. Open System Preferences (System Settings) > Network > and click the dropdown menu (depending on OS X or later version) > Manage Virtual Interfaces > Click "plus" button > New VLAN > Name your VLAN > Enter the VLAN ID created by your router or Layer 3 switch > select the NIC interface > click create. Do this process for as many tagged VLAN's you want your computer to be on. For me, after I do that, I disable ETH0 to get the computer off the untagged / management network.

[@spx2338]

With L2 switch and vlans when you copy files from pc A in vlan 10 to a pc B in vlan 20 it will be slow as hell because all traffic must go through the router to get data from pc a to pc b. With L3 switch the copy files action will go quick because the switch will do the routing using inter VLAN routing.

[@RayIT560]

Great video, thanks for taking the time. What are your thoughts on a home network, should the printer and NAS be on the main (secure) network or on the IoT Network. I do have my TVs, Roku, ACs and camera on VLANS but some things break when do this. Like the Roku application for TV control on Android.

[@KenS-ky6ff]

Thanks for making this great informative video. Your effort to simplify setting up Unifi networks is much appreciated. You demonstrated setting up the tagging for IoT, Guest and Access point ports, what would the suggested configuration be for a camera port?

[@Nachesko]

I know this video is old but wanted to leave a thank you for the work, finally I understand some basic concepts that didnt make sense before I watched this, specifically the untagged vs tagged difference. I am trying with an Ubiquiti edge switch and a HP v1910, and in the Ubiquiti its very simple, but cant for the life of me make it work on the hp. I will change the hp with a tp link one to test

[@user-jd6zl8ts8v]

This is by far the best Vlan video I have come across. It answered my long time question about tag vs. untag vlans

[@nunoalexandre4273]

Amazing video! All clear, I can finally say that I understand VLANs - Thank you!

[@Damageplan138]

Thank you so much for doing this video!!! If you could please do a follow up video on firewall configurations in the Unifi Environment to allow or disallow traffic through different vLan setups. For example. Needing guests to be able to print to a printer that is on the untagged lan or Allowing Lan users to be able to talk to an IOT device. Preciate You Sir! Keep up the great work!

[@kristod76]

Best VLAN principles explanation I have seen on YT. Thank you.

[@markjhorsley]

The amount of videos I’ve watched on tagged, untagged and trunk ports FINALLY I now understand it thanks to this ❤

[@charlesbuzz]

Lots a work on that video, great job! thanks for sharing your knownedge

[@fernandovalero8605]

I have a similar set up of a LAN and three VLANS just like your example. I have our main LAN, IOT, camera and a guest. Firewall is OPNsense, a windows server doing DHCP for all LANs, DNS and print server. I use Cisco small business devices, a CBS250 24port with poe and two CBW150ax APs. I have a few ports untagged on the switch for some IOT hubs. The camera VLAN does not go through the APs only LAN, IOT and Guest. On occasion IOT devices don’t renew their IP and I have to manually power cycle them to acquire it. Other than that issue that happens seldomly everything works fine.

[@djp_video]

I might have missed it, but it seems that there was no mention of PVID values, which are the standard way of indicating the "native VLAN" for a given port. If you aren't using Unifi, PVID is probably the way that the interface refers to the native VLAN ID.

[@tamaskovats]

great shirt! should have added "off the LAN" quote though :D

[@charlesyoung7922]

THANK YOU SO MUCH!

[@charlesquesenberry3604]

Absolutely incredible video! Well done. I believe you may have misspoke between 30:38 and 30:47. I may be wrong, but I believe you referred to tagged ports as untagged. Easy to do, especially given the number of times you had to say tagged and untagged.

[@SomeGuyFromFlorida]

What a great video. Can't tell you how many hours I've spent reading & watching videos on this topic and your presentation caused it all to gel. I suddenly love the new way UniFi does this and I figured out my ancient Dell PowerConnect switch while I was at it with these concepts. So pumped! Fantastic job, Chris. This could be a template for an industry standard.

[@JCMoorer]

Thank you!!! This was so helpful. For the first time, I finally understand VLANS.

[@JOEJOETHEJOEY]

GREAT VIDEO AS ALWAYS!! After setting the VLANs, how do I assign which tag ID each device should go to? Most of my network is plugged into a TP-Link 16 port POE switch which then goes to a USG which is then connected to the modem. Can you make a video which shows that process?

[@robertjones9189]

This video is going to help soooo many people, including myself! :) I know how vlans work, but this just simplifies it and will help me help others.

[@Dr-AK]

Thanks for video. My two question are, do all wireless access points offer 3 or more ssid to be able to setup? Also, how do I configure a device to to automatically find or use a tagged vlan on a trunk port? Are these special devices that can do that? Thank you

[@bradhowells9024]

Fantastic. Future Ubiquiti user in Zambia (gotta get equipment cleared through our version of the FCC) This helped me understand tagged vs. untagged so much better.

[@EmmanuelReyes]

Thank you for the great video, I have one question. On the router you setup 4 vlans, but how do you connect it to the switch. Do you connect each port to the switch (using 4 ports) or you connect only one port and the router will be assigning all the IP address ranges via one cable? Hope it make sense

[@corybowdach74]

Thanks for this. For the Unifi AP configuratuon, does it have to be on a specific vlan? I have an unsecured rj45 port I want to plug a Unifi Mesh AC to get access to the guest network.

[@youjoint]

Great video, Question would you put your point to multipoint antenna wireless wire all on its own VLAN, or would that work?

[@BerNieSLU]

I learned today that I can manually set the VLAN Tag on my Mac, thank you.

[@CliveTrezona]

Thanks for a great video Chris. Does one have to tag the default lan with tag 1?

[@CrosstalkSolutions]

Nope - unless you specifically tag, 1 is the default.

[@Zak_Hooi]

finally a video that clearly explains the tagged/untagged issue.

[@tchaikovskygoss7410]

Another great video Chris. Your videos on Ubiquiti products are the sole reason that I settle on Unifi equipment a few years ago. Thanks for all your hard work.

[@BrentCameron]

Ditto for me too!

[@johnpoldo8817]

Sorry to say, I feel exactly opposite on the horrible Ubiquiti controller. This week I struggled to resurrect a corrupted USG-3P and get LAN2 to function. It was nightmare flipping back to legacy view UniFi for the necessary menu items because V8 is incomplete. While USG demands a new VLAN for lan2, there’s no way to define tag, untag, or trunk. Very disappointing software and documentation.

[@ZIMAVIATION]

Love your videos - thanks for the effort In this video at 26:40 you say .... Devices can only see internet and not other devices on the same VLan network? But clicking on the little blue "i"next to isolations it says Isolates this network from all other Virtual Networks using firewall rules on the Unifi Gateway. Devices on this network ARE ABLE to communicate with each other.

[@wyrdlg]

Very nice. Perhaps you can elaborate how you can talk across Vlans or manage an iot vlan device from your safe vlan

[@ChrisNicholson]

Mdns

[@aconinja8668]

Amazing work there. Very well presented! One thing i dont understand (or i missed) is how do i as the owner control say cameras conected to vlan 20 and smart switches xonnected tl vlan 30 from my phone? Do i need to connect to each individually or can i have access to all as the owner/admin? Cheers

[@TheBrotherHolmes]

Does the port that the AP is connected to have to have vlan 1 set to untagged, or does that not matter?

[@tshepolr5833]

Okayyyy Now that is an excellent tutorial video. Leaving here ready to go setup my home VLANs; just need to get up to speed with firewalls.

[@abrahamajibadeoyediji9249]

Thanks for this. I will like to know which port the Unifi would have to connect to, to broadcast the three VLAN(s)?

[@Muzic1-nz1ef]

Thank you for video lesson. I want to have the following: a guest, adult child, IOT and a separate secure network for wife and I. we are running 200mb cable speed. What hardware and best set up would you suggest? I hope i am not asking too much. Thank you in advance.

[@OlgierdvonEverec-ul4te]

Thx. I am rookie in this topic, but you inspired me to dig in this area.

[@tonyscaminaci7959]

Excellent explanation that gave me an intro but I’m not quite sure how wireless AP’s interact with a router/firewall in the absence of a network switch. I really don’t want to use hard wiring throughout the house so all devices are connecting wirelessly only, i.e., no network switch and only one port of the router hardwired to the wireless AP.

[@littlebluedinosaur]

New to this so sorry if this is astupid question: should APs be on a specific VLAN and do they need to be trunk ports? Thanks for your fantastic videos, I add a plus 1 to the call for explaining firewall rules, specifically allowing mDNS for AirPlay and HomeKit operation whilst keeping IOT devices on their own VLAN and laptops, phones, iPads, HomePods etc on a secure VLAN. Driving me insane trying to learn from scratch! Is this something Rogue Support could do remotely?

[@johnpoldo8817]

If I wanted isolation between APs, I would put each on a separate tagged VLAN. Most APs allow VLAN tagging.

[@fredrikandersson7662]

Do you have to set up VLANs in both the router and the switch or will these VLANs be transferred between them? I use EdgeSwitch 24 and a Cloud Gateway Ultra.

[@jrrtolkin]

Great, thanks.

[@todornikolov2063]

Thank you for great explanation. I have a question - at 19:00, there is trunk port with all VLAN on it. If we plug device in this port, how does switch determine what VLAN needs to be assosiated to this device - by default, LAN is untagged, but if deice is 'guest' device, how it will be assosiated to VLAN 10? Thanks again.

[@IamDoQtorNo]

Howdy. I appreciate your videos. I'm late to the party. I have a Protectli with Pfsense on it. And a tplink tl-sg1024DE behind it. At this point I think I want/need 5 or 6 VLANS. Would you recommend having pfsense to control the vlans and trunk to the tp link switch OR have the switch to handle the vlans?

[@jamesburke9165]

What do you do when you have more that one switch and 2 switches are connected together or a switch connected through a port on an access point because the main switch powers the ap using poe?

[@BSD2000]

I have nearly 40 years experience with computers. I have various certifications for networking and I was a senior network engineer for a Fortune 100 company for decades. Here's something I hate to admit: I can never seem to get VLANS to work reliably in my own home network. At work, it's part of the job and works fine. At home, it's hit or miss with some devices and it rarely works. For the life of me, I can't figure out why, so I just gave up on it and use isolated physical networks instead.

[@omgubler]

Highly informative! Easy to follow, thanks!

[@malismo]

Thanks! Finally an easy to understand explanation of VLANs. Didn't get it before, get it now.

[@deepakkoirala2296]

Content looks focused on enterprise. Would love to see have VLAN configured for home network to isolate networks.

[@SidebandSamurai]

Great video. Thank you for the information. It was clear as mud until the very end when you demonstrated. Then it all came together

[@Yehan-xt7cw]

There are scenarios not mentioned. Most ip phones have 2 ports. The 1st (with PoE in) connected to the switch, and the 2nd connected to a pc (in case there are not enough wall outlets or switch ports. If the phone is connected to switch port 1, the phone should get connected to vlan 30, while the pc gets connected to vlan 1. If the phone is connected to unifi switch port 2, the phone gets connected to vlan 30, while the pc gets connected to vlan 20. If the phone gets connected to unifi switch port 3, the phone does not get connected. But what happens to the pc? Assuming most phones are like dumb switches, or just bridging the 2nd port, the pc still should get connected to vlan 10. If not, the pc should be connected either.

[@entirelynutz5772]

I currently have ethernet cables running around my house coming back to my router's 4 ports. I have hubs connected to many of them that have several other devices plugged in. I primarily use static ip addresses. Can I configure the static ip address for a particular subnet and set the ports on the router to accept all subnets?

[@TSSC]

Here’s my idea for a “made easy” explanation: - Think of a switch as a house with multiple doors (ports) and of each device as a person. - Each person wears a T-shirt, and it can have a number printed on it (tagged) or not (untagged). - An access system at each door (port) checks the number on the shirt and dispenses a badge (think DHCP) based on the number on the T-shirt. - Persons with tagged shirts having a number that is allowed entry will get a badge (think IP address) for that group. - Persons with no number on the shirt will get another (default) badge. - Persons with a number that is not whitelisted will not get a badge, and cannot enter.

[@stamford70]

Great presentation. I'm thinking of getting into Unifi in my new house so I've saved this to watch it all again later when trying to set it up as a nooob. 👍

[@Pabula]

Question, if you have more than 255 users, what would be the easist way to increase more users having access to interent? creating seprate vlans per each ssid to have a different dhcp on each? or you recommend a different approach?

[@JP-ir6gs]

Hi . Thanks for the video. I have a question: just to clarify, you manually set up the vlan tag id on the phone to 30 and use dhcp. You can also set this on windows in NIC settings. What would happen if a user connects to a tagged port (exposed waiting room example) and starts guessing and testing IDs until he finds ID 30. Now he has access to the Voip network. What is the best practice to avoid this? Can a hacker scan and test a range of vlan tag id's? Should the id's be random large multiple digit numbers? Also, what happens if a user manually inputs default network (192.168.1/24) Tcp/ip address while connected to iot or guest port. Will they have acces to the main network?

[@jamessapp4679]

Do you have any insights as to whether to use Private Pre-shared keys vs.separate SSIDs for WiFi VLans?

[@jokinboken]

Do all the VLANS share the same DHCP instance? In general how do you configure your DHCP service to know which ip's to assign based on VLAN tags (or the absence of VLAN tags)?

[@alfred576]

Thanks for this explanatory video on VLANs. Would you be able to do a configuration example on TPLINK OMADA devices?

[@CrosstalkSolutions]

I have a full TP-Link Omada setup tutorial - check it out on my channel!

[@alfred576]

@@CrosstalkSolutions I watched that video but I am trying to find out more on setting up ACLs (gateway and switch ACLs) correctly IE isolating VLAN1 the default admin Lan from being pinged, accessed, blocking access to the default gateway from other VLANS, installing printers discovery software across VLANS, more on mDNS on how to use and configure properly. I contacted tplink support staff on live chat and they couldn't help me. Thank you very much Chris.

[@dtitan1993]

Im using a Opnsense firewall with multiple nics and vlans configured, I want to get a new wifi AP/Router to use. Which brand/model do you recommend for the wifi?

[@tomstechnews]

Best VLAN explanation ever! Thank you Chris for this vid!

[@VerbalKungFu1]

Excellent video @CrosstalkSolutions !! What about restricting VLAN 30 from accessing VLAN1 (default) You spoke about it, but I don't think it was covered in the video?

[@russellford9016]

Fantastic description and presentation.

[@markrocka8718]

This is a great video. Exactly what I was hoping to find when I searched KZbin. I'm struggling a bit with Tagged and Untagged. at 30:27, you said port 4 is untagged on VLAN1, untagged on VLAN10, and untagged on VLAN20. First, I want to make sure that wasn't just a mistake and you meant to say "tagged on VLANs 10 and 20." Second, I'd like to better understand how a port tags. Say I have 10 ports for PoE cameras that I want to all be on their own VLAN (say VLAN20) and unable to talk to other VLANs. If the cameras have no way to specify a VLANs in their own settings, do I set VLAN20 as native for those ports or tagged? I assume you treat devices differently based on whether or not you can program the device itself for VLANs? Again, awesome video! Thanks for making it!

[@yvesbaumes]

I have a question: is it possible for a UniFy routeur (or a switch) to load a different VLAN configuration for a port, based on the Mac address of the device I plug into this port? For instance, let say I plug my personal computer into any port, which means the router knows its Mac address, then, based on the Mac address, it loads the "secure/default" profile for this port. That is the untagged vlan id is the '1'. But if I plug any other computer (that is a device I don't know the Mac address) then the "guest" profile is loaded. That is the untagged vlan id is '20'. Is it currently possible with a UniFy router (or switch)? If not, wouldn't it be a great feature to have?

[@meeron]

A very valuable video, thank you.

[@ZoneDotZip]

Thank you!

[@user-zk1zm6sm2u]

VLAN concept is now clear!!!

[@lhamil64]

Great video. I thought of some questions while watching, hopefully you (or someone!) can answer: Can you disallow untagged VLAN devices on a port? I.e, require that a VLAN is configured on a device (so someone can't plug in a random device) How do static IPs play into all this? What if you configured a device with a VLAN (or let it default) but set a static IP in the wrong subnet? (I.e, the hacker in the lobby tries to circumvent the allowed VLAN tags by setting a static IP) Can multiple VLANs have the same subnet? What effects would that have?

[@Zak_Hooi]

yes, if you make a port tagged for VLAN x , but not untagged .. the device will have to use VLAN x otherwise it will not get an IP.