Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

1811 Router - Switch VLAN question


Have a question regarding the 1811 router with built in 8 port switch. For a branch office I need 4 network segments:

1. LAN1 (Private subnet)

2. LAN2 (Private subnet)

3. LAN3 (Private subnet)

4. INTERNET/WAN (Public subnet)

All segments need to be isolated from each other with access managed by firewall/access lists. The 3 LANs need to be NATed out to the Internet.

Can this be done with an 1811 using VLANing on the switch?

What Im assuming can be done is to use the 2 dedicated ports for the WAN and LAN1. And then by using VLANs, I can appoint a switch port to LAN2 and another switch port to LAN3.

But! can I managed the switch ports for LAN2 and LAN3 as though they are routed ports - and control their access to the other networks and between each other? And can LAN2 and LAN3 NAT out to the Internet?

A reseller has said I need an 1841 with the 4 port HWIC switch module to do this?

Please help.



Re: 1811 Router - Switch VLAN question

the 1811 is a fixed configuration model router with support for upto 8 vlans. (no firewall between them; only firewall between LAN and WAN.

you cannot control the LAN ports as routed ports. they are switching ports only.

NAT will be performed by the firewall for all devices outbound, and port redirection for inbound.

the 1841 is a modular configuration model and can support the features you're requesting.

see these links for more info:

New Member

Re: 1811 Router - Switch VLAN question

Thanks for your response.

So the difference we are looking at here is that on the 1841 switch module, traffic between 2 VLAN?s can be controlled by access lists, but not on the 1811 switch? Reading around it appears they are similar in that both models VLANs appear as layer 3 routable ?interfaces? ? ie, on the 1811 you can route between two VLAN?s but perhaps you cannot firewall them from each other? Is that correct?


CreatePlease to create content