[Wireless Router] What is VLAN and how to setup in ASUS Wireless Router?

  A VLAN (Virtual Local Area Network) is a logical network that is created within a larger physical network. VLANs allow you to segment a network into smaller, virtual sub-networks, which can be used to isolate traffic and improve network performance.

  VLANs are often used in enterprise networks to separate different departments or groups, or to segment different types of traffic (such as voice, data, and video). They can also be used in home networks to isolate different devices or users, or to separate guest networks from the main network.


  • Trunk port(Tagged):

A VLAN trunk port is a networking port that is used to carry traffic for multiple VLANs (Virtual Local Area Networks) over a single physical connection. Trunk ports are often used to connect switches, routers, and other networking devices in a network, and are typically configured to allow traffic for multiple VLANs to be transmitted over a single link.


  • Access port(Untagged):

A VLAN access port is a networking port that is used to carry traffic for a single VLAN (Virtual Local Area Network) over a physical connection. Access ports are often used to connect devices such as computers, printers, and other end-user devices to a network, and are typically configured to allow only traffic for a single VLAN to be transmitted over the port.



1). By creating a Guest network pro, a VLAN will be created as well in VLAN settings.

2). VLAN supported models:  

  • GT-AX11000 Pro, GT-AX6000, GT-AXE16000, RT-AX86U Pro, RT-AX88U Pro
  • ZenWiFi Pro ET12, ZenWIFI Pro XT12(only provide beta firmware)

3). The following feature requires router firmware version later than version or above. Some models provide beta firmware ( to experience this feature.

     This is an early stages beta. This version can be downgraded via web GUI only. For instruction about how to update the firmware, please refer to How to update the firmware of your router to the latest version 


How to setup VLAN on ASUS Router?

1. Connect your computer to the router via wired or WiFi connection and enter your router LAN IP or router URL https://www.asusrouter.com to the WEB GUI.

2. Key in your router's username and password to log in.

3. Go to  LAN  > VLAN page.

4. Create a VLAN profile in [Profile] tab. You can assign your own VLAN ID.

5. Port isolation restricts access rights with different devices in the same VLAN.

    In this page, you are now creating a [VLAN-only-Network], which means a network with VID but without DHCP.

    If the VLAN is with a Guest Network Pro (SDN) profile, you can enable AP isolation to restrict access rights with different WiFi devices respectively.

    If you want to enable DHCP on this VLAN network, you can go to Guest Network Pro (SDN), advanced settings for customization.

6. In [VLAN] tab, you can select a port with specific profile and mode (Trunk/Access).


LAN port mode:

a. Factory settings: [All(Default)], which means allows all tagged, untagged packets.

b. Access mode: Allow a selected SDN(VLAN). You can select profiles either creating by Guest Network pro or VLAN.

    For example, if we have a Guest_01(Guest network) with VID=52, select port 4 as access mode and profile is Guest_01, this port will grant the same rights as Guest_01.

c. Trunk mode:

    Allow all tagged: All tagged packets are allowed, non-tagged will be dropped.

    With selected SDN(VLAN): selected SDN or VLAN is allowed only.

    You can use trunk mode to connect router to management switch.






How to get the (Utility / Firmware)?

You can download the latest drivers, software, firmware and user manuals in the ASUS Download Center.

If you need more information about the ASUS Download Center, please refer this link.