VLANs
VLANs
VLANs are the building blocks PrivateLAN uses to segment your network. This page explains how to create VLANs, configure routing, and deploy them to your switches.
Creating a VLAN
When you create a VLAN, you configure:
| Field | Description |
|---|---|
| VLAN ID | The numeric VLAN identifier (1-4096) |
| Name | A short, descriptive name |
| Network | The subnet's network address |
| Subnet mask | The subnet mask (e.g. 255.255.255.0) |
| Gateway / virtual IP | The default gateway address for devices in this VLAN |
The number of VLANs you can create is limited by your license.
Routing and high availability
A VLAN can have a primary router and an optional secondary router — both selected from your registered switches. The secondary router provides redundancy if the primary becomes unavailable.
Two routing protocols are available:
- HSRP — Cisco-only, supports one or two routers
- VRRP — open standard, requires two routers
Management VLAN
One VLAN can be marked as the management VLAN. This VLAN cannot be deleted, since it is used for PrivateLAN's own management traffic to the switches.
Deploying VLANs to switches
Use Program all switches to push the full set of configured VLANs to every switch at once. If you only need to update a single switch, use the Program VLAN action on that switch (see Switch Management).
Assigning VLANs
VLANs are not automatically available everywhere — they are assigned to:
- Device groups — controls which VLANs devices in that group are allowed to use
- Switch groups — controls which VLANs are carried by switches in that group
Default VLAN settings
For each switch type (Cisco / Aruba), you can configure a default VLAN that is applied to interfaces that have not been explicitly assigned to a device.