How to configure VLANs with shared access to the Internet on a NETGEAR Easy Smart Managed Switch with an Easy Smart UI?

This article describes how to configure VLANs with shared access to the Internet on a NETGEAR Easy Smart Managed Switch with an Easy Smart user interface (UI).

For an article with the same topic for a NETGEAR Easy Smart Managed Switch with an traditional UI, see How to configure VLANs with shared access to the Internet on a NETGEAR Easy Smart Managed Switch with a traditional UI?

For this type of configuration, the Internet router that you are using must be VLAN-aware. The devices in each VLAN are not allowed to communicate with devices in other VLANs because inter-VLAN routing is disabled on the router.

In this example, we configure three VLANs:

• VLAN 1 / network IP address 192.168.1.0 (mask 255.255.255.0)
• VLAN 2 / network IP address 192.168.2.0 (mask 255.255.255.0)
• VLAN 3 / network IP address 192.168.3.0 (mask 255.255.255.0)

We configure the switch ports as follows:

• Switch port 1 connects to port 1 on the router. We call this port the trunk port.
• Switch ports 2 and 3 are members of VLAN 2.
• Switch ports 4 and 5 are members of VLAN 3.
• The remaining switch ports are members of default VLAN 1.

The following diagram presents an overview of the network. (The NETGEAR Web Managed Plus Switch is now called the NETGEAR Easy Smart Managed Switch.)

We recommend that you make sure that the switch is running the latest firmware. For more information, see How do I find the firmware version of my Smart Switch or Easy Smart Managed Switch?

To configure VLANs on a switch and then configure VLANs on a router:

Log in to a NETGEAR Easy Smart Managed Switch with an Easy Smart UI:

1. Connect your computer to the same network as the switch.
   You can use a WiFi or wired network connection, or connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser.
3. In the address field of your web browser, enter the IP address of the switch.
   For more information, see How do I access the device UI of my NETGEAR Easy Smart Managed Switch?
   The login page displays.
4. Enter the switch password.
   The password is the one that you specified the first time that you logged in. The password is case-sensitive.
   The HOME page displays.

Create VLAN 2 and VLAN 3 and add ports to these VLANs on the switch:

1. From the menu at the top of the page, select SWITCHING.
2. From the menu on the left, select VLAN.
3. In the Advanced 802.1Q VLAN section, click the ACTIVATE MODE button
   Note: A pop-up window opens, informing you that the current VLAN settings will be lost.
4. Click the CONTINUE button.
   Your settings are saved. The Advanced 802.1Q VLAN pane displays.
   By default, VLAN 1 is added, and all ports are made untagged members of VLAN 1.
5. Click the ADD VLAN button.
6. In the VLAN ID field, type 2.
7. Select the Port 1 T box to mark port 1 as tagged. Port 1 functions as a trunk port that is connected to the router.
8. Select the Port 2 U box and the Port 3 U box to mark these ports as untagged. Ports 2 and 3 connect to client devices.
9. Click the APPLY button.
   Your settings are saved.
   Remain in the Advanced 802.1Q VLAN pane.
10. Click the ADD VLAN button.
11. In the VLAN ID field, type 3.
12. Select the Port 1 T box to mark port 1 as tagged.
13. Select the Port 4 U box and the Port 5 U box to mark these ports as untagged. Ports 4 and 5 connect to client devices.
14. Click the APPLY button.
    Your settings are saved.

Configure the port PVID settings for untagged ports on the switch:

1. Remain in the Advanced 802.1Q VLAN pane.
   For each port marked as untagged in the previous procedure, set the PVID of that port to the VLAN ID of the VLAN it was assigned to.
2. In the PVID Table section, click the PVID Table link.
3. Click the Port 2 icon.
4. From the menu, select 2 for VLAN 2.
5. Click the APPLY button.
   Your settings are saved, and 2 displays with an asterisk (*) next to port 2, indicating that VLAN 2 is assigned as the PVID.
6. Click the Port 3 icon.
7. From the menu, select 2 for VLAN 2.
8. Click the APPLY button.
   Your settings are saved, and 2 displays with an asterisk (*) next to port 3, indicating that VLAN 2 is assigned as the PVID.
9. Click the Port 4 icon.
10. From the menu, select 3 for VLAN 3.
11. Click the APPLY button.
    Your settings are saved, and 3 displays with an asterisk (*) next to port 4, indicating that VLAN 3 is assigned as the PVID.
12. Click the Port 5 icon.
13. From the menu, select 3 for VLAN 3.
14. Click the APPLY button.
    Your settings are saved, and 3 displays with an asterisk (*) next to port 5, indicating that VLAN 3 is assigned as the PVID.
15. Click the Back button.
    The Advanced 802.1Q VLAN pane displays.

The following example uses a NETGEAR PR60X Pro Router. The method to configure your router might not be the same but the same principles might apply. Refer to the documentation for your router if you are not sure how to complete the configuration of your router.

Log in to the PR60X Pro Router:

1. Launch a web browser from a computer or mobile device that is connected to the router network.
2. In the address field of your browser, enter https://www.routerlogin.net.
   The login page displays
3. Your browser might display a security warning. For more information, see What do I do if I my browser displays a security message?
4. Type one of the following passwords:

• Type the router user name and password. The user name is admin.
  The password is the one that you specified when you set up the router. The user name and password are case-sensitive.
• If you are managing the router through the Insight Cloud Portal or Insight app,
  type the Insight network password for the Insight network location to which the router is added.

The Dashboard displays.

On the PR60X Pro Router, create VLAN 2:

1. Select LAN > VLAN Settings.
   The VLAN Settings page displays.
2. Click the Add VLAN Profile button.
   The Add New VLAN Profile pop-up window displays.
3. In the VLAN ID field, type 2.
4. Keep the Inter VLAN Routing toggle gray and position to the left.
5. Traffic between this VLAN and other VLANs on the router is restricted.
6. In the IP Address field, type 192.168.2.1.
7. In the Subnet Mask field, type 255.255.255.0.
8. In the DHCP Server section, click the Status toggle so that it is blue and positioned to the right.
   The DHCP server is enabled and assigns an IP address to the devices on this VLAN.
9. In the Start Address field, type 192.168.2.100 as the start address for the DHCP server.
10. In the End Address field, type 192.168.2.254 as the end address for the DHCP server.
11. Select the Use these DNS Servers button.
12. In the DNS1 field, type 192.168.2.1.
13. Click the Apply button.
    Your settings are saved. The new VLAN profile is added to the VLAN Settings page.
14. Remain on the same page but scroll down to the Assign VLANs to Wired Ports section at the bottom of the page.
15. For VLAN 2, select Tagged in the LAN 1 column.
    The LAN 1 port is already an untagged member of VLAN 1, so for VLAN 2, the LAN 1 port must be a tagged member.
16. Click the Apply button.
    Your settings are saved.

On the PR60X Pro Router, create VLAN 3:

1. Select LAN > VLAN Settings.
   The VLAN Settings page displays.
2. Click the Add VLAN Profile button.
   The Add New VLAN Profile pop-up window displays.
3. In the VLAN ID field, type 3.
4. Keep the Inter VLAN Routing toggle gray and position to the left.
5. Traffic between this VLAN and other VLANs on the router is restricted.
6. In the IP Address field, type 192.168.3.1.
7. In the Subnet Mask field, type 255.255.255.0.
8. In the DHCP Server section, click the Status toggle so that it is blue and positioned to the right.
   The DHCP server is enabled and assigns an IP address to the devices on this VLAN.
9. In the Start Address field, type 192.168.3.100 as the start address for the DHCP server.
10. In the End Address field, type 192.168.3.254 as the end address for the DHCP server.
11. Select the Use these DNS Servers button.
12. In the DNS1 field, type 192.168.3.1.
13. Click the Apply button.
    Your settings are saved. The new VLAN profile is added to the VLAN Settings page.
14. Remain on the same page but scroll down to the Assign VLANs to Wired Ports section at the bottom of the page.
15. For VLAN 3, select Tagged in the LAN 1 column.
    The LAN 1 port is already an untagged member of VLAN 1, so for VLAN 3, the LAN 1 port must be a tagged member.
16. Click the Apply button.
    Your settings are saved.

Test your VLAN configuration:

1. Connect a computer to a port on the switch in VLAN 2.
2. Connect a computer to a port on the switch in VLAN 3.
3. Disable the WiFi connection on both computers.
4. Verify that the computers cannot access each other because inter-VLAN routing is disabled.
5. Verify that each computer can access the Internet.