I've bought a DrayTek Vigor 2860 for my company network. And I'd like to use it for two VLANs with separated external IP's. I have 6 LAN ports on my DrayTek.

For example: External IP-adres: Internal VLAN: - LAN port 1

External IP-adres: Internal VLAN: - LAN port 2

LAN port 1 and LAN port 2 will both be connected to network switches which, so multiple devices can be added.

I know how to setup VLANs, but I cannot find this feature in my router. Is this router capable of doing this? If yes, what should I do?

Drawing of what I mean: Draytek Vigor 2860 two VLANS with separate external IPs

Link to online management interface of the DrayTek router (testing and demo by DrayTek http://eu.draytek.com:12860/)

  • Do you really need VLANs or do you just mean separately routed subnets? The 2860 can route separate subnets via each of its LAN ports but (as far as I know) it cannot handle VLANs directly. – roaima Mar 28 '15 at 16:47
  • I think I need a VLAN.. I'm not sure. Let me explain. The internal IP-range - is for a set of servers an the internal IP-range - is for another set of servers. I can not change those internal IP-addresses. That are VLAN's if im right.. I cannot think I can do this with only changing the subnets? – Ivo van Beek Mar 28 '15 at 16:52
  • VLAN's operate at Layer 2 for the purpose of segregating hosts at Layer 2. You don't need VLAN's, you need routing in order to route traffic between the two subnets. – joeqwerty Mar 28 '15 at 16:53
  • So if I'm correct, I can do what I want and it's called IP Routed Subnet. Am I correct? I've found a manual (unfortunately in Duch), so when I'm correct I think I can set it up.. – Ivo van Beek Mar 28 '15 at 16:58
  • 1
    What Draytek calls VLANs everyone else here calls routed subnets. – roaima Mar 28 '15 at 17:29

This is a late response, but I think I've accomplished what you're trying to do.

How have you set up your multiple public IP addresses in the 2860? I have a block of eight from BT, five of which are usable. As I understand it, the first two addresses in the block are network and broadcast addresses respectively, and the last one is the router address, leaving the remaining five available for use. I set mine up as follows: On the WAN Internet Access page of the 2860, in the IP Adress From ISP section, select Fixed IP (even though BT static IP addresses are actually assigned using what is effectively a DHCP reservation) and enter the router public IP address (the highest one) in the Fixed IP Address field. Then click the WAN IP Alias button and added the five usable addresses in successive boxes under the Aux. WAN IP heading, making sure to enable them. If it doesn't matter what external IP address the traffic goes out on then tick the Join NAT IP Pool boxes; otherwise leave them empty except for the first one, which can't be cleared anyway. Now, when you set up Open Ports under the NAT section of the main menu, the public IP addresses will be available in the WAN IP dropdown menu, and you can specify which LAN uses which public IP address. You can then use these settings in your firewall rules.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.