what's the difference between tag-based and Port-based VLAN and which one is better ?
I think you are really asking about the difference between trunk interfaces and access interfaces.
An access interface is an interface where you connect and end-device (PC, printer, etc.). Most end-devices do not understand tagged frames. The switch will only send frames for a particular VLAN through an access interface, and it assumes any frames received on the interface are for the VLAN configured on the interface.
Trunk interfaces carry frames for multiple VLANs. In order for a device on the other end of the trunk link to separate the frames into the correct VLANs, you must tag the frames (possibly except frames for a single VLAN, which would be the native VLAN for that trunk).
Some end-devices may be configured to understand tagged frames and use a trunk. This is done by creating virtual interfaces, one for each VLAN.
Tag-based VLANs are the industry standard 802.1Q VLANs, while the port-based VLANs are more akin to Private VLANs. If you need to ask this question, you probably want tag-based VLANs, but we really do not have enough information about the final objective to give you an answer.
The manual is pretty clear about the difference:
This is the default setting.
Tag-based VLAN identifies its member by VID. This is quite different from port-based VLAN. If there are any more rules in ingress filtering list or egress filtering list, the packet will be screened with more filtering criteria to determine if it can be forwarded.The switch supports supplement of 802.1q.
Each tag-based VLAN you built up must be assigned VLAN name and VLAN ID. Valid VLAN ID is 1-4094. User can create total up to 256 Tag VLAN groups.
Port-based VLAN is defined by port. Any packet coming in or outgoing from any one port of a port-based VLAN will be accepted. No filtering criterion applies in port-based VLAN. The only criterion is the physical port you connect to. For example, for a port-based VLAN named PVLAN-1 contains port members Port 1&2&3&4. If you are on the port 1, you can communicate with port 2&3&4. If you are on the port 5, then you cannot talk to them. Each port-based VLAN you built up must be assigned a group name. This switch can support up to maximal 26 port-based VLAN groups.