Configure VLANs on a Manageable Switch in 2026: Isolate Your Network

This tutorial guides you step-by-step through configuring VLANs on your manageable switch in 2026. The goal is to isolate various parts of your network to improve security and traffic efficiency. You will set up different VLANs, assign ports to the appropriate VLANs, and test communication between VLANs.

Prerequisites

A manageable switch with VLAN support (e.g., TP-Link TL-SG108-M2)
Physical connection to the switch via an Ethernet cable
Basic knowledge of switch command-line interface

Step-by-step installation

Step 1: Connect to the Switch’s Web Interface

To configure VLANs, you must first access the web interface of the TP-Link TL-SG108-M2. Open a browser and enter the IP address of the switch.

Step 2: Create the First VLAN

Go to the VLAN section, click ‘Add’, then enter the following information:

VLAN ID: 10 (for personal network)
Name: Personal Network Save and repeat for other VLANs such as a visitor network with VLAN ID 20.

Step 3: Assign Ports to VLANs

In the ‘Ports’ section, select each port you want to assign to the personal VLAN (ID 10) or another. Click on the edit icon to change the mode type to ‘Access’. Enter VLAN ID 10 and save.

Step 4: Verify VLAN Configurations

Connect a device to a port assigned to VLAN 10, then try connecting to another network (e.g., visitor network with VLAN 20). Devices should be in different VLANs to prevent any communication.

Step 5: Secure Inter-VLAN Communications

To secure communications between VLANs, enable the VTP protocol if necessary. Also configure switch security rules to block or filter inter-VLAN traffic.

Step 6: Test Communication Between VLANs

Connect two different devices to ports assigned to distinct VLANs (e.g., one port in VLAN 10 and another in VLAN 20). Try sharing files or accessing network resources. If communications are blocked, the configuration is correct.

Verification checks

Use the switch’s web interface to check that all ports have been correctly assigned to their respective VLANs and that security rules are in place. For example, in the ‘Ports’ section, you should see each port with its correct VLAN ID.

To test inter-VLAN communication, try sending a file from a device connected to VLAN 10 to another device on VLAN 20. If the transfer fails, the configuration is successful.

Security and best practices

Ensure your VLAN configuration is secure by enabling HTTPS for the switch’s web interface. Use strong and complex passwords for all administrative configurations. Also enable 2FA if possible to add an additional layer of security.

Troubleshooting common errors

Symptom: Devices can access other VLANs
Cause: The port is configured in ‘Trunk’ mode instead of ‘Access’
Fix: Reset the port to ‘Access’ mode and assign it to the correct VLAN.
Symptom: Devices cannot access the Internet via a router or modem
Cause: The router/modem port is not configured to allow all VLANs
Fix: Configure the router/modem port in ‘Trunk’ mode and permit communication for necessary VLANs.

FAQ

Port Configuration Too Complicated?

Try using a graphical tool within the switch’s web interface to simplify port management.

Why Block Communication Between VLANs?

Isolating networks can help prevent internal attacks and protect sensitive resources.

How to Add New VLANs After Initial Setup?

Add a new VLAN in the switch’s web interface, then assign it to appropriate ports. Update security rules if necessary.