TSW202 can it add a tag to an untagged device?

[mcc7]

Hi I have purchased 2 off TSW202
I have connected a Draytek AP906 which can add tags to devices which are not VLAN aware. Mainly IOT home automation devices, To complete the setup I need to utilise some of the ports to add a tag. Is this even possible?

You may have guessed I am not that Network aware. The access point can simulate two access points.

I have read through Vlans and tags on the forum. Couldn’t or rather more likely have not understood the various discussions.

[LukasV]

Hello,

It is possible to configure the system so that Draytek devices and other connected devices don’t require VLAN tags, even if tagged VLAN traffic enters the switch. The switch can accept tagged traffic on one port, strip the tag, and send the data through an untagged port, and vice versa. In essence, the switch will act as a converter between tagged and untagged traffic, while still keeping all devices connected within the same VLAN network. Here’s how to do it:

On your TSW202 switch, go to Network > VLAN and follow these steps:

1. Enter the VLAN instance name (it’s recommended to use a number that matches the tagged VLAN ID).
2. Click the Add button to create the VLAN.
   
   
3. Enter the ID number for your tagged VLAN.
4. Set Port 3 as tagged and connect your tagged VLAN device (Router) with ID 3.
5. Then configure Port 3 as untagged (you will connect your Draytek AP906 device to it later).
6. Save & Apply
   
   

Next, navigate to Network > Interfaces

1. Enter new LAN interface name
2. Click Add button
   
   
3. Enable the instance.
4. Enter the static VLAN subnet IP address.
5. Select the netmask.
6. Enter the VLAN subnet gateway device’s IP address.
7. 2x Save & Apply
   
   

This way, your Draytek device will receive untagged IP settings from the tagged VLAN network. Configure your Draytek device’s LAN settings to match the same tagged VLAN network, disable its DHCP settings, and connect any LAN port to the switch’s port 3.

Any of your IOT home device connected to the access point should receive IP addressing from the tagged VLAN network pool.

Please let me know if that worked for you.

Kind Regards,

Lukas

[mcc7]

I have taken the tag1 off Vlan1 on the AP906 and draytek switch.
I can connect to 192.168.0.1 Vlan
I can connect to 192.18.1.1 Vlan

If I understand your comment the switch would remove the Tag1. Which is effectively what I have done.

In the many articles I read I though a port could add a tag? when I set Tag 1 on the Draytek router and AP905 wifi devices associated with 192.168.0.1 connect. The devices connected to wired ports do not!

I am unable to attach picture I shall try to describe in interfaces
Protocol
Static
VLAN
VlanTag10
IPv4 address
*
192.168.1.5
IPv4 netmask
*
255.255.255.0
IPv4 gateway
192.168.1.1
IPv6 address
e.g. 0000:0000:0000:0000:0000:0000:0000:0000
IPv6 gateway
e.g. 0000:0000:0000:0000:0000:0000:0000:0000
DNS servers
103.86.96.100

103.86.99.100

Interface 2 static
Protocol DHCP

VLAN vlan1

[mcc7]

Hi Lukas here are Vlan details, incase I am doing something wrong

vlan1 id1
untagged 1, 2, 3, 4, 5, 6, 7, 8, SFP 1, SFP 2
Tagged None

vlanTag10 vlan id 10
untagged ports none
tagged ports 8, SFP 1

[mcc7]

Hi I have carried out further reading on the subject. If I understand correctly I would need to set a port to PVID which would add a tag to packets arriving from an untagged device eg AppleTV the port would add a tag.
If my understanding is correct can the TSW202 be configured as such?

[LukasV]

Sorry if I caused any confusion, but you’re almost there! I made a mistake in the picture between steps 3 and 4 when creating the LAN interface—the VLAN was set to vlan1, but it should have been vlan3.

The TSW202 switch can not only remove tags but also add them, acting as a converter between tagged and untagged traffic. VLANs are separate networks identified by their VLAN ID (or tag). Tagged interfaces communicate with tagged devices, while untagged interfaces communicate with untagged devices.

If you connect a device with a tagged VLAN to the TSW202 switch, and the port is configured with the appropriate VLAN ID, it will communicate with the device. If another port is set as untagged for the same VLAN, devices connected to it will also be able to communicate. The switch handles the conversion by adding or removing the VLAN tag based on the traffic’s direction. This allows both tagged and untagged interfaces to coexist within the same VLAN, enabling devices connected to those interfaces to communicate with each other, regardless of whether they are using tagged or untagged traffic.

Importantly, the switch itself must also be part of the VLAN. This requires configuring the switch’s LAN interface for that VLAN.

Summary:

• Configure both tagged and untagged ports for the same VLAN ID (e.g., VLAN 3).
• Set up the switch’s LAN interface to communicate within the tagged VLAN network.
• Connect tagged devices to the tagged port and untagged devices to the untagged port.

In your particular scenario, I imagine everything should look like this:

VLAN 10

Network IP : 192.168.1.0

Mask : 255.255.255.0

Router’s IP (Gateway) : 192.168.1.1

VLAN ID/Tag: 10

Now, I assume this network is configured as a tagged VLAN, meaning the router will only communicate with devices that tag their traffic and have IP settings corresponding to this VLAN.

To set this up on the TSW202:

Create a new VLAN (follow the first two images from my example) with the ID “vlan10” and enter “10” in the VLAN ID section. Set one port as tagged (for connecting your tagged VLAN Draytek router) and another as untagged (for connecting your Draytek switch).

Create a new LAN interface with settings that match the VLAN configuration on your tagged VLAN router (refer to the third and fourth images from my example, ensuring you select “vlan10” instead of “vlan1”).

For your Draytek AP906 access point, I assume you’re connecting one of its LAN ports to the Draytek switch. However, the AP906 still needs to be configured to operate within the same VLAN network, without tagging. To do this, adjust its LAN settings to match the VLAN network settings with static IP, but without applying any tags.

Additionally, if your Draytek router is the DHCP server, you must turn off the DHCP server on the AP906. Only one DHCP server can be active on the network at a time, otherwise there might be a conflict. By doing this, the AP906 will function solely as a relay for DHCP settings to the connected devices.

The same procedure applies to any VLAN, including vlan1.

Please try configuring the network accordingly and let me know if everything works as expected.

Kind regards,

Lukas