802.1Q VLANs on the DrayTek 2960 Firewall
Connecting Separate VLANs: Routing Between VLANs with Trunk Ports
VLANs allow a network to be logically segmented based on applications, traffic, job roles etc which greatly simplifies management and security. Tag-based VLANs are implemented on the switch, but to allow different VLANs to communicate with each other, the router and the switch need to be connected with a VLAN trunk and inter-VLAN routing needs to be enabled on the router. The trunk ports on the router and the switch will be members of all the VLANs that need to be routed.
Draytek routers and switches support two types of VLANs, port-based and 802.1Q tag-based. Below we step through the VLAN configuration for the DrayTek Vigor 2960 Dual-WAN enterprise router. Further information and a datasheet for the Vigor 2960 is available here. VLAN tagging for the VigorSwitch P2260 is also discussed. If you have a P2261, please note that the interface is different from the P2260 model.
Draytek Vigor 2960 Configuration
Figure 1. Configure two LAN Profiles under LAN->General Setup. Here, I have configured 192.168.200.x for Data VLAN and 192.168.100.x for Voice VLAN.
