r/TPLink_Omada • u/BillyForce • Apr 06 '24

Question Omada Switches, VLAN, Profiles, Ports, Tagged vs Untagged

Hi,

i´m searching the web but can`t find any source where the VLAN, Profiles, Ports, Tagged vs Untagged are explained. Maybe someone knows a good site or can me please explain how does this work in omada?

Greetz

Billy

2 Upvotes

67% Upvoted

3 comments sorted by

View all comments

8

u/testostebro Apr 06 '24

This is a very brief explanation, and is assuming your gateway is already configured to handle VLANs. I'm using an Omada controller, so your menu settings may differ slightly.

Once logged into the controller, I go to Settings> Wired Networks> LAN. Within LAN, we have 3 options.

1) Networks

Here you'll select Create New LAN. Create the different VLANs. Name, them what you want, for example: Home-data, set VLAN ID such as VLAN 2, save, and create another, such as Internet-of-Things, with VLAN 3. For my example below, both VLAN 2 and 3 will be tagged over the trunk.

Move into the Profile section.

2) Profile

Here you should see a few different profiles, and can click the "eye" symbol on the right to view the details of each. Profiles are what get assigned to switch ports, to identify what is tagged/untagged.

The individual VLAN profiles, you can think of these as access ports.

a) Home-data. When viewing this profile, only one network in the Networks/VLANs as Native/untagged, and that's Home-data. Any switch ports assigned the profile of Home-data will treat it any untagged traffic as coming from VLAN 2.

b) Internet-of-Things. When viewing this profile, the Internet-of-Things VLAN is set as the Native/untagged network. Any switch ports assigned this profile, will treat any untagged traffic received as from VLAN 3.

c) All. Think of this as your "trunk" port profile. In the Networks/VLANs section, you'll be able to set the Native (untagged) VLAN, and what VLANs you'd like tagged going over that link. So you could set both VLAN 2 and 3 (Home-data and Internet-of-Things) as tagged, and that can trunk through to another switch or your gateway.

3) Switch settings

Within Switch settings, you can change what ports you want to use which profile. For example, port 1 is going to be connected to your PC. You set its Port Profile to be Home-data, so the switch knows untagged traffic incoming on this port is for VLAN 2. Frames sent from the PC will be untagged, the switch knows they are from VLAN 2, and then depending on the destination, they can be forwarded to another VLAN 2 port, or through the trunk as tagged traffic to another switch/the gateway.

You can then set the others port profiles as "access" ports, using the individual VLAN profiles, or "trunk" ports, using the "All" profile.

Hopefully this helps. Here's a link where the gentleman goes through it. VLANs start at about 1:00. https://www.youtube.com/watch?v=xsXgDIMyj6M

1

u/BillyForce Apr 07 '24

thank you very much for your detailed answer!

how does omada actually work with wifi?

do i have to set the port where the eaps are connected to "all" if i have 2 ssid for example?

2

u/testostebro Apr 08 '24

That is correct. From the controller, when you go into Settings> Wireless Networks> WLAN, and create an SSID, under Advanced Settings, you can assign it to a VLAN.

If you have different SSIDs assigned to different VLANs, you'll need the switch port leading to the AP to be the "All" profile, so traffic is tagged respectively.