FreshTomato supports Virtual LAN (VLAN) configurations that conform to the 802.1Q standard. The user can create up to 16 VLANs. A VLAN can use a VID between 1 and 4094.

If you are new to VLANs, here is an excellent introductory video:

Practical Networking - What are VLANs

For VLANs to work properly on ARM and MIPS routers, please use r2021.8 or later. See the examples for more details.

• VLAN - this VLAN's unique identifier. (VLAN 0 to VLAN 15)
  
  

• VID - allows you to override “traditional” VLAN/VID mapping
  (Such as: VLAN 4 to VID 4) with arbitrary VIDs for each VLAN.
  Use “0” for “regular” mappings instead.
  
  

• Ports 1 to 4 and WAN - specify which Ethernet ports will be
  members of this VLAN.
  
  
• Tagged - enables 802.1Q tagging of Ethernet frames on a
  particular port/VLAN.
  
  
• Default - the VLAN ID assigned to untagged frames that
  the router receives.
  
  
• Bridge - determines whether this VLAN ID should be treated as WAN,
  part of a LAN bridge or just left as is (a member of an 802.1Q trunk,
  managed manually via scripts).

Note that since r20261, the VLAN display has changed. There is now only one symbol per cell to enable/disable tagging. The “tag” column has been removed.

Configuration example: German Telekom ISP

GT supports a dual-stack setup (IPv4 & IPv6). For the WAN Port, a VLAN tag with a value of 7 (VID 7) is required.

This section contains assignments of wireless interfaces to various LAN bridges, as well as the ability to disable ports not in use.

Always check/verify the correct settings on the Virtual Wireless and Network menus to ensure proper VLAN operation.

The following settings are also mandatory:

• One VID must be assigned to the WAN interface.
  
  
• One VID must be selected as the default.
  
  
• Avoid using VID: “0” to prevent 802.1Q compatibility issues.
  802.1Q specifies that frames tagged with “0” don't belong
  to any VLAN. The “0” tag contains only user priority details.
  Wikipedia: 802.11Q
  
  
• Avoid using VID: “1”. Some vendors label it “special”
  or “reserved” for management.

For VLANs to function properly, use Freshtomato r2021.8 or later. Older forks like AdvancedTomato, or Toastman may not work as expected. These are usually unsafe, deprecated and should not be used in live environments.

PPPoE Connections with FreshTomato r2021.7 and older.

PPPoE connections work only when the following workaround is implemented:

Example 1: Connecting to German Telekom using FreshTomato r2021.7
ISP German Telekom uses PPPoE with VID: “7”.
⇒ you must use VLAN: “7” using VID: “7” (a “traditional” VLAN/VID mapping).

Example 2: Connecting to Freedom Internet using FreshTomato r2021.7
Freedom uses PPPoE , and VLAN: “6” using VID: “6”

See: FreshTomato-ARM - development discussion only - Freedom.nl PPPoE

Example 3: Connecting to Vivo FTTH (Brazil) using FreshTomato r2021.7
Vivo use PPPoE, and VLAN: “10” using VID: “10”

See Tomato Forums: R7000 - VLAN issue on FTTH provider

Since r2021.8, you can select/use any VLAN from 0 to 15. (See example in above picture for 1 (Telekom ISP), now using VLAN 5 with VID 7).