Tp-Link TL-ER5120 [49/146] Port vlan

-44-

3.1.7.6 Port VLAN

A VLAN (Virtual Local Area Network) is a network topology configured according to a logical scheme

rather than the physical layout, which allows you to divide the physical LAN into multiple logical LANs

so as to control the communication among the ports

The VLAN function can prevent the broadcast storm in LANs and enhance the network security. By

creating VLANs in a physical LAN, you can divide the LAN into multiple logical LANs, each of which

has a broadcast domain of its own. Hosts in the same VLAN communicate with one another as if they

are in a LAN. However, hosts in different VLANs cannot communicate with one another directly.

Therefore, broadcast packets are limited in a VLAN.

TL-ER5120 provides the Port VLAN function, which allows you to create multiple logical VLANs for the

LAN ports based on their port numbers.

Choose the menu Network→Switch→Port VLAN to load the following page.

Figure 3-25 Port VLAN

The following items are displayed on this screen:

¾ Port VLAN

Network:

Displays the current logical network of the physical port.

VLAN:

Select the desired VLAN for the port.

Tips:

● The Port VLAN can only be created among the LAN ports.

● The change of DMZ status will affect the configurations of Port VLAN. You're recommended to

check or reconfigure the Port VLAN if the status of DMZ is changed.

3.2 User Group

The User Group function is used to group different users for unified management, so that you can

perform other applications such as Bandwidth Control, Session Limit, and Access Control etc. on per

group.