enter image description here

what's the difference between tag-based and Port-based VLAN and which one is better ?

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Apr 1 '18 at 20:11

I think you are really asking about the difference between trunk interfaces and access interfaces.

An access interface is an interface where you connect and end-device (PC, printer, etc.). Most end-devices do not understand tagged frames. The switch will only send frames for a particular VLAN through an access interface, and it assumes any frames received on the interface are for the VLAN configured on the interface.

Trunk interfaces carry frames for multiple VLANs. In order for a device on the other end of the trunk link to separate the frames into the correct VLANs, you must tag the frames (possibly except frames for a single VLAN, which would be the native VLAN for that trunk).

Some end-devices may be configured to understand tagged frames and use a trunk. This is done by creating virtual interfaces, one for each VLAN.


Tag-based VLANs are the industry standard 802.1Q VLANs, while the port-based VLANs are more akin to Private VLANs. If you need to ask this question, you probably want tag-based VLANs, but we really do not have enough information about the final objective to give you an answer.

The manual is pretty clear about the difference:

VLAN Mode:


This is the default setting.

Tag-based VLAN identifies its member by VID. This is quite different from port-based VLAN. If there are any more rules in ingress filtering list or egress filtering list, the packet will be screened with more filtering criteria to determine if it can be forwarded.The switch supports supplement of 802.1q.

Each tag-based VLAN you built up must be assigned VLAN name and VLAN ID. Valid VLAN ID is 1-4094. User can create total up to 256 Tag VLAN groups.


Port-based VLAN is defined by port. Any packet coming in or outgoing from any one port of a port-based VLAN will be accepted. No filtering criterion applies in port-based VLAN. The only criterion is the physical port you connect to. For example, for a port-based VLAN named PVLAN-1 contains port members Port 1&2&3&4. If you are on the port 1, you can communicate with port 2&3&4. If you are on the port 5, then you cannot talk to them. Each port-based VLAN you built up must be assigned a group name. This switch can support up to maximal 26 port-based VLAN groups.

  • I'm a student in network administration . this year i have a project about divide my university network in VLANs , i did not understand how to divide it because the switches are old "LevelOne GSW-2690" it have the two options tag-based and port-based VLAN . could you help me in this ?
    – Med Mtiri
    Feb 1 '18 at 22:37
  • It is pretty clearly explained in the manual. What else do you need to know?
    – Ron Maupin
    Feb 1 '18 at 22:45
  • after making multiple port on a vlan how could I make inter VLANs connection (trunk in cisco ) ??
    – Med Mtiri
    Feb 1 '18 at 22:54
  • In a Cisco switch, you would use the switchport mode trunk command. I'm not sure what you mean.
    – Ron Maupin
    Feb 1 '18 at 22:58
  • i'm not using a Cisco switch i'm using "LevelOne GSW-2690" it don't have trunk mode that's the my problem , what should i do for links between switches . (sorry for my bad english )
    – Med Mtiri
    Feb 1 '18 at 23:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.