Internet-Box 3 VLANs (Virtual LAN) creation

    • Dear community,

    I have an Internet-Box 3 for home with TV Box and WLAN. All works for me.

    I can connect to the Web interface of the Internet-Box 3 and can enable the Expert mode.

    I saw in the past that I can create new VLANs (maybe with Internet-Box 2), but I cannot find any menu in order to configure new VLANs on Internet-Box 3.

    It is feasible with Internet-Box 3 or not? I have the firmware version 14.20.30 and saw this post (posted in 2021…) that is not possible: https://community.swisscom.ch/t5/Archiv-Internet/VLAN-on-Internet-Box-2/m-p/600784#M18650

    Is that right?

    Maybe I can do it with the new firmware.

    The reason why I would like to create VLANs and assign ports is for my differents tests with network devices and I would like to separate with WLAN and TV Box and my little laboratory 😉

    Looking forward for your answers and suggestions.

    Best regards,

    Antoine T.

    This post is in English

    • Hi @antoineT

      Unfortunately, the IB firmware still does not allow the creation of additional VLANs. This has been on our “Wishlist” for some time, but sadly, I am not aware of any firmware that will allow this.

      As @Black Mamba already mentioned, you could use the VLAN of the guest-network for your lab.

      However, you won’t be able to define firewall-rules on the IB to allow traffic from your main network to the guest network or vice versa. If that does not suit your needs, there is no way going around an additional router.

      If you are building a home lab, maybe something like a virtualized pfSense?

      Best,

      r00t

    @antoineT

    is it an additional Virtual LAN or WLAN?

    For Virtual LAN see this discussion

    Virtual LAN Vlan | Swisscom Community

    For an additional WLAN use the WLAN guest network

    to allow guest WLAN to be also propagated through the WLAN-Box (1 or 2) when this WB is connected to the gateway through an Ethernet switch, you need to setup your switch by doing this:

    • access the Zyxel configuration
    • allow tagged VLAN 1977 to be forwarded to all ports of the switch
    • retry

    Please note that guest WLAN is only broadcasted on 2.4GHz, there’s no guest WLAN on 5GHz (neither on IBx or on WBx).

    Note that the Swisscom TP-Link switch is more than enough unless you need multi gig capability (with the 2.5Gb/s port of the Internet-Box 3 for example). It performs well and you can set up a lot of things if needed. Obviously it comes pre-configured for Swisscom services like TV over the switch, guest WLAN over a WLAN-Box, Bonding for the Internet-Booster, etc. It’s certainly not the most recent gigabit device on the market but you would likely not get much better performance with a more recent gigabit switch…. last but not least it’s not very expensive

    The TP-Link switch is matching your expectations!

    This post is in English

    Hi @antoineT

    Unfortunately, the IB firmware still does not allow the creation of additional VLANs. This has been on our “Wishlist” for some time, but sadly, I am not aware of any firmware that will allow this.

    As @Black Mamba already mentioned, you could use the VLAN of the guest-network for your lab.

    However, you won’t be able to define firewall-rules on the IB to allow traffic from your main network to the guest network or vice versa. If that does not suit your needs, there is no way going around an additional router.

    If you are building a home lab, maybe something like a virtualized pfSense?

    Best,

    r00t

    This post is in English

    4b 65 69 6e 65 20 4d 61 63 68 74 20 64 65 72 20 6c 65 67 61 63 79 20 49 50 21

    Dear all,

    Thank you for your replies.

    @Black Mamba thank you for your suggestion. I would like to create virtual LANs. The guest WLAN is a good option, but I would like to use a wired connection, so that is the reason why I asked if I can create new VLANs to isolate wired connections and WLAN.

    @r00t Thank you for your confirmation. I found yesterday a little NETGEAR managed switch, so I can create VLANs and assign to ports. the virtualized pfSense seems to be a good option. I will check the documentation on my side.

    I will close this request, your replies answered my question.

    Thank you.

    Best regards,

    Antoine T.

    This post is in English