# VLAN and port tagging confusion

**URL:** <https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439>\
**Category:** Routers\
**Tags:** vlan, bug-report\
**Created:** [January 23, 2025, 7:04pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439 "2025-01-23T19:04:28Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [January 23, 2025, 7:04pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/1 "2025-01-23T19:04:28Z")

</div>

I’m in the midst of fiddling with VLAN and port tagging and I’m very confused. I get strange outcome on VLAN listed per device.

VLAN 90, 192.168.90.1/24, setup as Isolated, and firewall rule allowing traffic from 192.168.90.0/24 LAN to WAN (may not be necessary?). The purpose is to keep my old router underneath the Route10 for the time I’m migrating devices, while still allowing access to internet, and for learning how to set up VLANs as well.

Furthermore:  
Short lease time, 60 s, setup for VLAN 1 and 90 for testing.  
Device (Asus router) → VLAN 90, IP Static 192.168.90.2 (and left blank in a second try)  
Route10, WAN#1 (first port from the left) → Mode Standard, Color Black, Native VLAN 90, Allowed VLANs 90 only.

Port shows as U for VLAN 90 in Route10 ports layout.

 ![1000005844](https://forum.alta.inc/uploads/default/original/2X/9/9df684dcceb1461a14ade5578e38fc9cd7b2766e.jpeg)  
 ![1000005843](https://forum.alta.inc/uploads/default/original/2X/4/4281d9ed6911da3d36fd42d30deb647ab99f5c75.jpeg)  
 ![1000005841](https://forum.alta.inc/uploads/default/original/2X/0/097666e5dcab358041bb846f1cbc7a187fd6a744.jpeg)

I get access to Internet through my old router, IP shows as intended (also with dynamic IP in the correct VLAN subnet) but in the devices list I get VLAN printed as **2**. Anyone with comments on that? Seems like a bug in the printout or does it reside in a VLAN 2 that is not even defined?!

Also, if I set Devices VLAN to blank (remove 90) the connection to the Router is lost. It seems like blank is interpreted as Default VLAN 1 (?), as the corresponding Route10 Native VLAN is reverted to Default at the same time.

Then, if I change the Route10 port Native VLAN to 90 again I regain access. But, I would have thought that any device attached to the Untagged port assigned for VLAN 90 traffic would show up automatically on VLAN 90 with IP in the corresponding subnet. Is this also a potential bug or have I misunderstood it all?

When I try the same maneuver for a VLAN 30, also short lease time but not Isolated, for two streaming devices attached to an unmanaged switch connected to Route10 I end up with them on the correct subnet for dynamic IP, corresponding to VLAN 30, but they show up as VLAN **1** in the devices list. 🤔 Hmmm?

All WiFi devices shows up with correct VLAN corresponding to VLAN setup per WiFi SSID.

---

<div class="post-metadata">

**Author:** ![Alta-Matt\_v2](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-matt_v2/32/2456_2.png) [@Alta-Matt\_v2](https://forum.alta.inc/u/Alta-Matt_v2)\
**Post date:** [January 23, 2025, 7:11pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/2 "2025-01-23T19:11:11Z")

</div>

Can you explain the intent of the Asus router in this equation? It _sounds_ like you’re trying to route a VLAN through the Route10 but another VLAN through the Asus router?

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [January 23, 2025, 7:27pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/3 "2025-01-23T19:27:07Z")

</div>

The intent is just to have an isolated passage from my Asus router through to the ISP. It is not overly necessary but I got very confused over why the router showed up as VLAN 2 in the context of Route10 devices. The Asus router is free of VLAN except for any native VLAN.

---

<div class="post-metadata">

**Author:** ![Alta-Matt\_v2](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-matt_v2/32/2456_2.png) [@Alta-Matt\_v2](https://forum.alta.inc/u/Alta-Matt_v2)\
**Post date:** [January 23, 2025, 7:28pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/4 "2025-01-23T19:28:53Z")

</div>

So the topology would be

Route10 → Asus Router → Various clients?

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [January 23, 2025, 7:32pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/5 "2025-01-23T19:32:08Z")

</div>

Yes, indeed. A few clients already moved and some not yet migrated from the Asus router to the Route10, and I want the non-migrated devices to still be up an running with internet access. So, as I mentioned, the internet access works but I’m confused over the VLAN listing.

---

<div class="post-metadata">

**Author:** ![Alta-Matt\_v2](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-matt_v2/32/2456_2.png) [@Alta-Matt\_v2](https://forum.alta.inc/u/Alta-Matt_v2)\
**Post date:** [January 23, 2025, 7:45pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/6 "2025-01-23T19:45:58Z")

</div>

Ok, there’s really no need for a VLAN at all as the Asus router would take on a DHCP lease from the Route10, then through NAT and its own DHCP server, hand out addresses behind the Asus NAT.

However, it should be pretty straightforward if you wanted to add a VLAN.

 ![2025-01-23_13-43](https://forum.alta.inc/uploads/default/original/2X/9/9f1af93b768a6a31d940a6bfac00a1c556ab9d90.png)

1. Add VLAN
2. Specify VLAN number and the Router IP. Router IP will be the address assigned to the Route10 VLAN. In this case, I specify a /30 which allows for 2 addresses, 1 for the Route10 and one for the Asus which would be handled by DHCP
3. Click the interface the Asus will plug into
4. Specify the Native VLAN as the same VLAN number you specified in step 2
5. Check only that VLAN number

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [January 23, 2025, 8:06pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/7 "2025-01-23T20:06:18Z")

</div>

Agree totally.

However, the intention was to follow exactly that procedure already before, so I would assume it should have worked. But to be sure I set up a new VLAN **91** right now as per your instructions (also with only one IP in the pool with your suggestion on /30). I assumed step 5. relates to the Allowed VLANs, and to check the specific VLAN, now 91, only. This time VLAN in the device list shows up as 26. 😂😂

Edit: VLAN 26 is **not** among the defined VLANs.

Edit 2:  
After a reboot I can perhaps see some sort of logic:  
Devices on VLAN 30 gets VLAN 1 in list.  
Devices on VLAN 40 gets VLAN 2 in list.  
Device on VLAN 91 gets VLAN 3 in list.  
Devices on VLAN 40 moved to VLAN 50 (port tagging changed) gets VLAN 12 in list, which is my 9 VLANs currently defined in Settings + the three used by the wired ports for VLAN 30, 40 and 91 above.  
Devices on VLAN 50 moved back to VLAN 40 (port tagging changed back) gets VLAN 2 back in the list.

To me this looks like an index/iterator being printed instead of the actual VLAN ID. Is there perhaps some sort of array holding information on VLANs where the iterator gets printed instead of the VLAN ID?

---

<div class="post-metadata">

**Author:** ![Alta-Matt\_v2](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-matt_v2/32/2456_2.png) [@Alta-Matt\_v2](https://forum.alta.inc/u/Alta-Matt_v2)\
**Post date:** [January 23, 2025, 9:11pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/8 "2025-01-23T21:11:21Z")

</div>

Yes, definitely appears to be a bug. Have you only attempted this on the Android app?

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [January 23, 2025, 9:20pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/9 "2025-01-23T21:20:15Z")

</div>

The Alta Android app doesn’t show this kind of information from what I have been able to see. In the Alta Op app (!?), that I got suggestion to install when on the web controller page through Chrome on Android phone, shows this information. Not sure in what context/browser/app the controller is managed then, Chrome perhaps. Not tried on a computer browser yet.

---

<div class="post-metadata">

**Author:** ![Alta-Matt\_v2](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-matt_v2/32/2456_2.png) [@Alta-Matt\_v2](https://forum.alta.inc/u/Alta-Matt_v2)\
**Post date:** [January 23, 2025, 9:43pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/10 "2025-01-23T21:43:27Z")

</div>

So the screenshots are from the web interface, just happens to be on an Android phone?

There’s no individual controllers. The web and mobile apps all talk to our cloud, so no worries about that.

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [January 23, 2025, 9:47pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/11 "2025-01-23T21:47:43Z")

</div>

Yes, screenshots from an Android phone using the web interface.

---

<div class="post-metadata">

**Author:** ![Alta-Matt\_v2](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-matt_v2/32/2456_2.png) [@Alta-Matt\_v2](https://forum.alta.inc/u/Alta-Matt_v2)\
**Post date:** [January 23, 2025, 9:59pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/12 "2025-01-23T21:59:51Z")

</div>

Can you invite me to the site, please?

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [January 24, 2025, 8:19am UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/13 "2025-01-24T08:19:58Z")

</div>

Yes, done! 👍

And, I was wondering if I should branch the following off to another topic to keep things organized:

Somewhat hidden in this topic was also the fact that updating a device connected to an Untagged port, associated to a specific VLAN, gets unintentionally (at least in my opinion) Tagged to that VLAN and Native VLAN set to Default.

E.g. if I set Native VLAN 90 and Allowed VLANs 90 for a specific port, it gets set to Native VLAN Default by saving the Device with a changed static IP (or changing from dynamic to static IP) even though the Device VLAN was blank before. Reverting from a static IP to dynamic IP (delete setting and leave field blank) does not overwrite the Native VLAN for the port.

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [February 7, 2025, 8:46am UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/14 "2025-02-07T08:46:16Z")

</div>

Just noted that it is probably the same experience reported here:

> [@BUG: VLAN changed no. of Static IP, Router Locks up, Native VLAN changed on Port](https://forum.alta.inc/t/bug-vlan-changed-no-of-static-ip-router-locks-up-native-vlan-changed-on-port/3666/7):
>
> One thing I don’t understand is the VLAN column show 1, 2,4 which map to the real VLANS in use 1,15,20.
> 
> ![iot](https://forum.alta.inc/uploads/default/original/2X/c/c1742d45f3ca227d82d8fc74428e99e5d19d630c.jpeg)

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [February 21, 2025, 8:36pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/15 "2025-02-21T20:36:09Z")

</div>

> [@ebuckland81](#):
>
> I get strange outcome on VLAN listed per device.

now seems resolved by today’s batch of firmwares (Route10: 1.3x, Switch: 2.1t, AP: 2.2g). Devices now seems to have appropriate VLANs. 👍🙂

> **Screenshot of appropriate VLANs**
>
> ![1000006307](https://forum.alta.inc/uploads/default/original/2X/5/5b40b42cc0401a37da50b2002caf4d138b31ed7d.jpeg)

---

<div class="post-metadata">

**Author:** ![anon77415413](https://forum.alta.inc/letter_avatar_proxy/v4/letter/a/f1d935/32.png) [@anon77415413](https://forum.alta.inc/u/anon77415413)\
**Post date:** [February 21, 2025, 8:37pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/16 "2025-02-21T20:37:45Z")

</div>

Can someone from Alta explain WHAT was changed in the release today that would help this?

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [February 21, 2025, 8:40pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/17 "2025-02-21T20:40:45Z")

</div>

I was wondering about it too. I couldn’t read this from the release notes…unless there has also been a control update ([manage.alta.inc](http://manage.alta.inc)) that has not yet been notified of.

---

<div class="post-metadata">

**Author:** ![anon77415413](https://forum.alta.inc/letter_avatar_proxy/v4/letter/a/f1d935/32.png) [@anon77415413](https://forum.alta.inc/u/anon77415413)\
**Post date:** [February 21, 2025, 8:41pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/18 "2025-02-21T20:41:40Z")

</div>

I feel like [manage.alta.inc](http://manage.alta.inc) gets updated a LOT before they post release notes for it.

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [February 21, 2025, 8:45pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/19 "2025-02-21T20:45:19Z")

</div>

True. By the way, is there a version identifier to be found somewhere within [manage.alta.inc](http://manage.alta.inc)? Like some sort of About info.

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [March 2, 2025, 8:31pm UTC](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439/20 "2025-03-02T20:31:08Z")

</div>

The other half of the issue in this thread, see below, now seems solved by an update to Control([manage.alta.inc](http://manage.alta.inc)) 🙂

> [@ebuckland81](#):
>
> Somewhat hidden in this topic was also the fact that updating a device connected to an Untagged port, associated to a specific VLAN, gets unintentionally (at least in my opinion) Tagged to that VLAN and Native VLAN set to Default.

A slightly new approach to settings for wired devices and their corresponding ports seems to have got it straightened. Great job Alta 👍🙂 This should now allow for setting icons, static IPs, etc. without interfering with port VLAN.

I’ll report back if I see something not working as intended.

See screenshots of new wired devices settings and regular port settings (reached by clicking the switch icon) UI popup.

 ![1000006508](https://forum.alta.inc/uploads/default/original/2X/d/de7b674b10c02a40d0b4380957993988ff2e68e0.jpeg)  
 ![1000006509](https://forum.alta.inc/uploads/default/original/2X/9/96d700baa88e0bbd074266ae059694513bd86472.jpeg)

[Next page](https://forum.alta.inc/t/vlan-and-port-tagging-confusion/4439.md?page=2)
