LAN segmentation, and the process of adding LAN segments, is used for advanced networking scenarios when LAN traffic must be partitioned.
An instance where LAN segmentation can be utilized is when providing public Internet access to Wi-Fi users, such as bus passengers. In this scenario, it is important to ensure that private onboard equipment connected to the router’s Ethernet ports, such as fare boxes, remains inaccessible to Wi-Fi users. Multiple LAN segments are useful for specifying different network policies or routing rules on each segment.
The router comes with a single LAN segment (Default-LAN) and you can create additional network segments under Network > Zones Settings > LAN Segments.
User LAN segments are those defined by a user. System LAN segments are those defined automatically by the system. The System LAN segments are not directly configurable and are used in firewall rules, Multi-WAN rules or IP Passthrough, to name a few.
To configure a User LAN segment:
Go to Networking > Zones Settings > LAN Segments.
Under the USER LAN SEGMENTS table, click CREATE to create a new LAN segment, or click Edit ( ) in the table to update an existing LAN segment.
Begin configuring the LAN segment. Refer to the table below for details of individual settings.
SETTING | DESCRIPTION | RANGE | DEFAULT |
---|---|---|---|
NAME | Name assigned to this LAN segment | Required for all LAN segments | N/A |
IPV4 ADDRESS | Default gateway LAN address for this LAN segment |
IPv4 address. Required for all LAN segments |
N/A |
IPV4 PREFIX | Specifies how many bits of the IP address for this LAN segment are used for the network ID |
0 – 32 Required for all LAN segments. |
24 |
IPV6 ADDRESS | Default gateway LAN address for this LAN segment |
Double-colon notation. Leave blank to disable IPv6. |
N/A |
IPV6 PREFIX | Specifies how many bits of the IP address for this LAN segment are used for the network ID. |
0 – 128 Leave blank to disable IPv6. |
64 |
DHCP MODE | Specifies which DHCP Mode will be used. |
|
DHCP SERVER |
DHCP RELAY IPV4 SERVER ADDRESS |
Appears when DHCP MODE is set to DHCP Relay. The DHCP RELAY IPv4 SERVER forwards DHCP requests from IPv4 clients to a DHCP server, which may be on the same local network or on a different one. |
IPv4 address | Blank |
DHCP RELAY IPV6 SERVER ADDRESS |
Appears when DHCP MODE is set to DHCP Relay, and can be configured when an IPV6 ADDRESS is entered. The DHCP RELAY IPv6 SERVER forwards DHCP requests from IPv6 clients to a DHCP server, which may be on the same local network or on a different one. |
IPv6 address | Blank |
DHCPV4 SERVER |
Specifies if there is a DHCP server for IPv4 addresses
|
On, Off | On |
IPV4 POOL STARTING ADDRESS | If DHCPV4 SERVER is On, enter the starting IPv4 address of the pool of IP addresses available for DHCP |
IPv4 address Required for all LAN segments. |
n/a |
IPV4 POOL ENDING ADDRESS | If DHCPV4 SERVER is On, enter the ending IPv4 address of the pool of IP addresses available for DHCP |
IPv4 address Required for all LAN segments. |
N/A |
IPV4 LEASE TIME (IN MINS) | Length of time that the DHCP server will reserve an IPv4 address for a client device. This is added on to the remaining lease time of the device. | 2 – 65535 mins | 1 day (1440 mins) |
DHCPV6 SERVER |
Specifies if there is a DHCP server for IPv6 addresses
|
On, Off | Off |
IPv6 POOL STARTING ADDRESS | If DHCPV6 SERVER is On, enter the starting IPv6 address of the pool of IP addresses available for DHCP |
Double-colon notation Leave blank to disable IPv6. |
N/A |
IPv6 POOL ENDING ADDRESS | If DHCPV6 SERVER is On, enter the ending IPv6 address of the pool of IP addresses available for DHCP |
Double-colon notation Leave blank to disable IPv6. |
N/A |
IPV6 LEASE TIME (IN MINS) | Length of time that the DHCP server will reserve an IPv6 address for a client device. This is added on to the remaining lease time of the device. | 2 – 65535 mins | 1 day (1440 mins) |
IPV6 SLAAC | When enabled, SLAAC will use the device’s MAC address to create a unique interface identifier, which when combined with a network prefix forms a complete IPv6 address. | On, Off | Off |
IPV6 PROXY | When enabled, allows IPv6 traffic between clients on this LAN that are connected to different interface types. For example, allowing a USBnet client to talk to an Ethernet Client. | On, Off | Off |
BROADCAST FORWARDING | IPv4 packet forwarding for broadcast traffic. Specifies if the system will forward broadcast packets it receives on one network interface to other interfaces, allowing broadcast traffic to reach other subnets or networks. | On, Off | Off |
DHCP CLIENT DOMAIN NAME |
Enter a domain name that applies to all clients connected to this LAN segment. DHCP clients can be reached via this locally qualified domain name with the hostname as the first label. For example, hostname.client-domain-name. Using DHCP CLIENT DOMAIN NAME on different LAN segments, clients on different LAN segments can reach each other using different hostnames (for example, one LAN segment using hostname.domain.local and another LAN segment using hostname2.domain.local). |
Any valid local domain name format | Blank |
DOMAIN SEARCH LIST | Enter a list of domains used to create a FQDN from a relative name (DHCP Option 119). Each device connected to this LAN segment will have a default search domain added to their resolution when looking up names. For example, if a lookup of “somedevice” was made on domain.local, the router’s DNS server will look for somedevice.domain.local. | Comma-separated list of search domain names | Blank |
DHCP DNS SERVER | Select the DHCP DNS server to provide DNS resolution to LAN clients. DNS servers can be acquired through WAN links or by manually specifying primary and secondary DNS settings. |
|
None |
IPv4 PRIMARY DNS |
Appears when DHCP DNS Server is set to Manual. Enter the IP address of primary Domain Name System (DNS) server. |
IPv4 address | N/A |
IPv4 SECONDARY DNS |
Appears when DHCP DNS Server is set to Manual. Enter the IP address of secondary Domain Name System (DNS) server. |
IPv4 address | N/A |
IPv6 PRIMARY DNS |
Appears when DHCP DNS Server is set to Manual. Enter the double-colon notation of primary Domain Name System (DNS) server. |
Double-colon notation | N/A |
IPv6 SECONDARY DNS |
Appears when DHCP DNS Server is set to Manual. Enter the double-colon notation of secondary Domain Name System (DNS) server. |
Double-colon notation | N/A |