> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://mediakind.ferndocs.com/beam/system-admin/network/vlan-interfaces/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://mediakind.ferndocs.com/_mcp/server.

# Configure VLAN Interfaces

VLANs (Virtual LANs) allow you to segment your network by isolating traffic into different broadcast domains on the same physical network infrastructure.

You can add and delete VLAN interfaces on your Beam device from the web UI or the command line.

Configuring VLANs from the UI is available in Beam 1.9 and later.

## Configure VLANs using the UI

You can add, edit, and delete VLAN interfaces from the **System Settings** page. To rename an interface or change its VLAN ID or parent interface, you must add a new interface and delete the old one.

### Add a VLAN interface

* Go to Servers, select a server, and open the System Settings tab.

* In the Network devices section, click + Add VLAN interface.

* In the Add VLAN Interface dialog, select the Parent Interface and enter the VLAN ID.

* Click Add VLAN interface. The new interface appears in the list.

* Configure its settings, such as IP address and firewall zone. See Configure network interfaces for details.

* Click Save at the bottom of the page to apply the changes.

  The new interface is automatically named in the format `<parent_interface>.<vlan_id>`, for example, `eth1.100`.

### Delete a VLAN interface

* Go to Servers, select a server, and open the System Settings tab.

* In the Network devices section, find the VLAN interface you want to remove and click its Delete  button.

* In the confirmation dialog, click Yes, delete it!.

* Click Save at the bottom of the page to apply the change.

## Configure VLANs using the command line

To manage VLANs from the command line, use the `nmcli` tool. Run these commands using SSH or directly on the device terminal.

### Add a VLAN interface

### Create the VLAN interface

Create the VLAN interface with the `nmcli connection add` command. You must specify a connection name, an interface name, the VLAN ID, and the parent physical device.

* `con-name`: A descriptive name for the connection, for example `vlan10`.

* `ifname`: The name for the new VLAN interface, for example `eth0.10`.

* `id`: The VLAN tag number, for example `10`.

* `dev`: The parent physical interface, for example `eth0`.

This example creates a VLAN with ID 10 on the `eth0` interface:

* Terminal window

```shell
sudo nmcli connection add type vlan con-name vlan10 ifname eth0.10 id 10 dev eth0

```

### Configure the IP address

To use DHCP:

```shell
sudo nmcli connection modify vlan10 ipv4.method auto

```

* To assign a static IP address:

```shell
sudo nmcli connection modify vlan10 ipv4.addresses 192.168.10.50/24 ipv4.gateway 192.168.10.1 ipv4.method manual

```

### Configure the firewall zone

Assign the VLAN to a firewall zone based on its purpose.

* For a VLAN on a management port, set the zone to `control`:

```shell
sudo nmcli connection modify vlan10 connection.zone control

```

* For a VLAN on a data port, set the zone to `data`:

```shell
sudo nmcli connection modify vlan10 connection.zone data

```

### Activate the interface

Activate the new VLAN connection to apply the configuration.

```shell
sudo nmcli connection up vlan10

```

### Delete a VLAN interface

To remove a VLAN interface, delete its `nmcli` connection. This action removes the VLAN interface and its configuration.

```shell
sudo nmcli connection delete vlan10

```