Description:

This article describes how to set up VLAN on a switch with LCOS SX 5.xx.

For the VLAN setup, please also refer to the Knowledge Base article VLAN tagging modes explained.



Requirements:

  • One of the following LANCOM switch models:
    • XS-51xx / XS-6128QF
    • GS-45xx / XS-45xx
    • CS-8132F
    • YS-7154CF
  • LCOS SX as of version 5.00 for XS-51xx / XS-6128QF (download latest version)
  • LCOS SX as of version 5.20 for GS-45xx / XS-45xx (download latest version)
  • LCOS SX as of version 5.30 for CS-8132F and YS-7154CF (download latest version)
  • Any web browser for access to the web interface


Scenario:

The default VLAN 1 should be operated along with the VLAN 20.

To illustrate the configuration of the tagging modes, the ports 1/0/1 to 1/0/3 are assigned the following tagging modes:

  • 1/0/1: Access with the port VLAN ID 20
  • 1/0/2: Hybrid with the port VLAN ID 1
  • 1/0/3: Trunk

Image displaying a network configuration interface with terms like VLAN, switch, router, and trunk settings, indicating setup for intranet and production environments.


Procedure:

Changing the management VLAN:

A switch is administered via the management VLAN. The management VLAN is set in the menu System → Connectivity → IPv4.

A switch with LCOS SX 5.xx can be administered from the management VLAN and also from any other network if the switch has an IP address in this network.

It is not possible to set up routing for the management VLAN.

Image displaying a network configuration protocol interface with options for BOOTP and DHCP, including fields for IP address and default gateway.



Setting up the VLAN function:

The tagging modes for the VLAN are configured in two parts in the menus Switching → VLAN → Port Configuration and Switching → VLAN → Port Summary. You have to complete the configuration in both menus for the VLAN to work correctly.

VLAN tagging modes can also be set in the menu Switching → VLAN → Switchport Summary using the option Switchport Mode. Be sure to leave this at the default setting General, otherwise conflicts will occur and communication will fail!

1) Adding a VLAN ID: 

1.1) Connect to the switch via the web interface and navigate to the menu Switching → VLAN → Overview and click Add.

Screenshot of a technical configuration menu with columns labeled ANID, Name, Type, and RSPAN, displaying default settings.

1.2) Enter the desired VLAN ID (in this example the VLAN 20) and click on Submit.

Image displaying a technical configuration interface for setting or modifying VLAN IDs, including options to add a VLAN, specify a VLAN ID range, and separate multiple VLANs.


2) Configuring the tagging modes:

2.1) General description of the menus and parameters:

2.1.1) Description of the menu Switching → VLAN → Port Configuration:

This menu configures the tagging behavior for the VLAN and for a specific interface. For this reason each interface has to be configured separately for each VLAN.

Participation:

  • Include: The VLAN is allowed on this interface.
  • Auto-Detect: The switch detects the setting automatically. This setting should not be used during configuration.
  • Exclude: The VLAN is denied on this interface.

Tagging:

  • Untagged: The packet that is outbound from the switch is not tagged (Access and Hybrid for the port VLAN ID).
  • Tagged: The outbound packet is tagged (Trunk and hybrid for the tagged VLANs).

An image of a technical user interface showing options for participation, including 'AutoDetect' and 'Exclude', as well as tagging options for 'untagged' and 'Tagged'.


2.1.2) Description of the menu Switching → VLAN → Port Summary:

This menu configures the tagging behavior for a specific interface. Also, the port VLAN ID is saved here (if necessary).

  • Port VLAN ID: Enter the VLAN ID that is appended to any incoming packet without a VLAN tag. 
  • Acceptable Frame Type:
    • Admit All: Tagged and untagged packets are allowed on this interface.
    • Only Tagged: Tagged packets only are allowed on this interface.
    • Only Untagged: Untagged packets only are allowed on this interface.

Screenshot of a network configuration interface with options for editing port settings, including VLAN ID, frame type, ingress filtering, and priority settings.


2.2) Access tagging mode:

2.2.1) Change to the Port Configuration tab and make sure that VLAN ID 1 is selected. Then select the interface 1/0/1 and click Edit.

You can edit all of the interfaces at the same time by clicking the button Edit All. It is also possible to check multiple interfaces and click on Edit to edit all of them at the same time. The same settings are saved for all of them. 

Image displaying a technical user interface with options to include or exclude untagged items in a configuration menu.

2.2.2) Set the Participation parameter to Exclude so that VLAN 1 cannot communicate through interface 1/0/1. Then click on Submit.

2.2.3) Select the VLAN ID 20 created in step 1. Then select the interface 1/0/1 and click Edit.

You can edit all of the interfaces at the same time by clicking the button Edit All. It is also possible to check multiple interfaces and click on Edit to edit all of them at the same time. The same settings are saved for all of them. 

Image depicting a network configuration interface with options for system switching, routing, security, QoS, and vStacking, displaying various interface statuses, participation, and tagging settings like AutoDetect and untagged.

2.2.4) Modify the following parameters and click Submit:

  • Participation: Select the option Include so that VLAN 20 may communicate via the interface.
  • Tagging: Select the option Untagged.

Screenshot of a network configuration interface showing options for VLAN member ports with settings for auto-detection, exclusion, and tagging options including 'Untagged' and 'Tagged'.

2.2.5) Change to the tab Port Summary, mark the interface 1/0/1 and click on Edit.

You can edit all of the interfaces at the same time by clicking the button Edit All. It is also possible to check multiple interfaces and click on Edit to edit all of them at the same time. The same settings are saved for all of them. 

Screenshot of a network device interface showing various port configurations, VLAN settings, and status indicators for access permissions, each marked as 'Disabled'.

2.2.6) Modify the following parameters and click Submit:

  • Port VLAN ID: Enter the VLAN ID that is appended to an incoming packet that has no VLAN tag (in this example the PVID 20).
  • Acceptable Frame Type : Select the option Only Untagged .

Image of a network configuration interface showing settings for 'EditPortConfiguration', including options for Interface Vof, Port VLAN ID, acceptable frame types, and priority settings.


2.3) Hybrid tagging mode:

2.3.1) Change to the Port Configuration tab and make sure that VLAN ID 1 is selected. Then select the interface 1/0/2 and click Edit.

You can edit all of the interfaces at the same time by clicking the button Edit All. It is also possible to check multiple interfaces and click on Edit to edit all of them at the same time. The same settings are saved for all of them.

Image of a network configuration interface showing options for system switching, routing, security, QoS, and stacking with settings to include or exclude untagged traffic.

2.3.2) Modify the following parameters and click Submit.

  • Participation: Select the option Include so that VLAN 1 may communicate via the interface.
  • Tagging: Select the option Untagged.

Screenshot of a technical user interface showing options for Participation, AutoDetect, and Tagging features.

2.3.3) Select the VLAN ID 20 created in step 1. Then select the interface 1/0/2 and click Edit.

You can edit all of the interfaces at the same time by clicking the button Edit All. It is also possible to check multiple interfaces and click on Edit to edit all of them at the same time. The same settings are saved for all of them. 

Screenshot showing a configuration menu with options for system switching, routing, security, QoS, stacking, and VLAN settings including automatic detection and tagging preferences.

2.3.4) Modify the following parameters and click Submit:

  • Participation: Select the option Include so that VLAN 20 may communicate via the interface.
  • Tagging: Select the option Tagged.

Screenshot of a VLAN port configuration interface displaying settings including participation options like AutoDetect and Exclude.

2.3.5) Change to the tab Port Summary, mark the interface 1/0/2 and click on Edit.

You can edit all of the interfaces at the same time by clicking the button Edit All. It is also possible to check multiple interfaces and click on Edit to edit all of them at the same time. The same settings are saved for all of them.

Image showing a configuration interface for network settings, displaying options such as System Switching, Routing, Security, QoS, and Stacking. The table lists settings for Interface Port, VLAN ID, Current Acceptable Frame Type, Ingress Filtering, Untagged VLANs, Tagged VLANs, and Forbidden VLANs, with various ports set to Admit or Disabled status.

2.3.6) Modify the following parameters and click Submit:

  • Port VLAN ID: Enter the VLAN ID that is appended to an incoming packet that has no VLAN tag (in this example the PVID 1). 
  • Acceptable Frame Type: Select the option Admit All so untagged and tagged packets can be transmitted.

Image depicting the interface of the EditPortConfiguration menu with options for setting Port VLAN ID, Acceptable Frame Type (tagged or untagged), and enabling or disabling Ingress Filtering, as well as adjusting Priority settings.


2.4) Trunk tagging mode:

2.4.1) Change to the Port Configuration tab and make sure that VLAN ID 1 is selected. Then select the interface 1/0/3 and click Edit.

A screenshot showing a section of a user interface with an option labeled 'Include Untagged'.

2.4.2) Modify the following parameters and click Submit.

  • Participation: Select the option Include so that VLAN 1 may communicate via the interface.
  • Tagging: Select the option Tagged.

Screenshot of a VLAN port configuration interface highlighting options such as tagging for VLAN member ports, interface settings, participation, and auto-detect features.

2.4.3) Select the VLAN ID 20 created in step 1. Then select the interface 1/0/3 and click Edit.

You can edit all of the interfaces at the same time by clicking the button Edit All. It is also possible to check multiple interfaces and click on Edit to edit all of them at the same time. The same settings are saved for all of them. 

Screenshot of a network configuration interface showing options for system setup including Routing, Security, QoS, and Stacking, with detailed settings for Interface Status, Participation Tagging, and AutoDetect functionalities.

2.4.4) Modify the following parameters and click Submit:

  • Participation: Select the option Include so that VLAN 20 may communicate via the interface.
  • Tagging: Select the option Tagged.

Screenshot of the Edit VLAN Port Configuration menu showing options for NID, interface participation, and VLAN tagging settings with a note on enabling tagging for member ports.

2.4.5) Change to the tab Port Summary, mark the interface 1/0/3 and click on Edit.

You can edit all of the interfaces at the same time by clicking the button Edit All. It is also possible to check multiple interfaces and click on Edit to edit all of them at the same time. The same settings are saved for all of them. 

Image depicts a configuration menu for network interfaces, highlighting settings for VLAN ID, port status, and frame types, with varying states of acceptance and filtering for untagged and tagged VLANs.

2.4.6) For the Acceptable Frame Type select the option Only Tagged and click Submit.

Screenshot of a network configuration interface displaying options for Port VLAN ID, Acceptable Frame Type, and Ingress Filtering settings.



Save the switch configuration as the boot configuration:

With the configuration complete, click on Save Configuration in the top right-hand corner to save the configuration as the boot configuration.

The start configuration is retained even if the device is restarted or there is a power failure.

Screenshot of a LANCOM device interface showing options for Routing Configuration, Save Configuration, and Hide Device View.


 

All LANCOM products and software versions are subject to LANCOM Software Lifecycle Management.
You can find information on our website at https://www.lancom-systems.com/products/firmware/software-lifecycle-management

© 2025 LANCOM Systems GmbH