Configure vlans on managed switch

It depends on the capabilities of the switch.
Generally what you do with a Layer 2 switch like this, is you set an IP interface on the switch for management:  it appears that by default, the management interface is set to Vlan 1 on this switch,  which is also the default VLAN.

Plug it into a suitable router  (referred to as a 'router on a stick') of a type that can form an  802.1q  trunk  or "tagged port" with the switch, and route traffic between  multiple different VLANs  over  _one_  physical link between the switch and the Router.

Create an 802.1q subinterface on the router,  give that subinterface on the router an IP address, and the switch another IP address on the "management vlan"  subnet.

Set the switch's default gateway to the router's IP on the management VLAN.

Now, for every additional VLAN  you create on the switch,   you create a new subinterface on the router,  with a different IP subnet.


You assign all hosts connected to that VLAN on the switch, an IP address within your 'designated subnet'  for that VLAN on the router.


Then you have full proper connectivity between all your VLANs at  Layer 3.
But of course,  since they are on separate VLANs,  they are in different broadcast domains,  and do not connect directly at Layer 2,   which is the primary benefit of using VLANs.


You can now apply access lists to the various subinterfaces on your router to control   what packets  are allowed to be forwarded from different VLANs to other VLANs.

A good first step is to include an ACL  that  only  IP traffic  for   IP addresses in that VLAN's  IP range can be forwarded.

If  you want to prevent certain VLANs  from accessing  outside hosts, give certain VLANs priority (QoS)  when communicating each other, apply rate limits, etc,  you can do that.

Using plain old router access lists, route maps, etc.
As long as your router has those capabilities.


This is the manner in which it is typically done.
Well,  another possibility is to plug a router in as an access port, connected to only one VLAN,  and place the switch's  IP management interface in that VLAN.


But then you have _no way_   of connecting  other VLANs to each other, other than bridging (which destroys the advantage of VLANs), or getting more routers and connecting them together,  and they can't talk to the switch either (unless your switch allows you to add multiple  management IPs in different VLANs)...

This is not recommended...
It's best to have at least one Layer 3 device  capable of  inter-VLAN routing.
Unless you only have 2  VLANs,  

One that can connect to everything not in the other VLAN

And one VLAN that is completely isolated and can never talk to the internet or any other host in your network, other than ones in this isolated VLAN.