Skip to content
Any configuration changes made locally on the switch won't be synchronized with Sophos Central. We recommend making changes from the Sophos Central control panel instead.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/switch/help/en-us/index.html?contextId=user-guide-features-configure-VLAN-settings

VLAN settings

On the VLAN settings page, you can manage the switch's VLAN features, including basic 802.1Q VLAN configuration, GVRP protocol settings, Voice VLAN configuration, and ingress filtering controls.

802.1Q

Each VLAN in a network has an associated VLAN ID, which appears in the IEEE 802.1Q tag in the layer 2 header of packets transmitted on a VLAN. The IEEE 802.1Q specification establishes a standard method for tagging Ethernet frames with VLAN membership information. You can configure Sophos Switch to forward these tagged frames in addition to untagged frames. When using 802.1Q VLAN configuration, you configure ports to belong to a VLAN group. When a port receives frames tagged with a VLAN group, it discards them unless the port is a member of that VLAN group.

This video shows you how to configure VLANs on Sophos Switch.

You can see the following details for VLANs on the switch:

  • VID: The VLAN ID.
  • Name: The name assigned to the VLAN. You can use up to 32 characters and can't include ", \, %, &, ?, ', !, ;, |, or +. Names are optional and can help you identify which devices or traffic the VLAN is intended for.
  • Tagged: Frames transmitted from these ports are tagged with the VLAN ID.
  • Untagged: Shows the ports that pass traffic with the specified VLAN tag. To allow traffic from VLANs other than the default, you must select tagged ports.
  • Forbidden: Shows that ports that are forbidden from passing traffic with the specified VLAN tag.
  • GVRP advertisement: Shows whether GVRP advertisement is Turned on or Turned off for the specified VLAN.

To create a new VLAN, click Add, enter the VID and Name, and click Apply.

To edit an existing VLAN, click Edit for the VLAN whose settings you want to change.

To delete VLANs, select the VLANs you want to remove and click Delete.

Tip

The switch's default setting assigns all ports to a single 802.1Q VLAN (VID 1). Keep this in mind when configuring the VLAN settings for the switch.