Cisco SG200 VLAN

maredzki used Ask the Experts™
I have 4 Cisco SG200 series switches which are daisy chained with fiber. I need to create an extra VLAN but currently there are none on the system. I'm thinking about starting at the front end (server room) and and going to the last one. The uplinks are already trunks but need to make sure they are passing the VLANs. I guess the best approach would be to add all of the current devices (surveillance cameras) to a vlan and when that works I will have a working platform to add the second vlan.  Should they ports be tagged when adding them to a vlan?

What do you guys think?
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
What do you mean there's non on the system?  You can create about 4094 VLANs


I meant there are non configured, I think I stated it clearly when I said "that I need to create an extra VLAN but currently there are none on the system" - as in non-configured currently.
well by the use of "extra" you made it seem like you already had some prior.  But anyways, yes VLAN would be good diea if you going to use the switch for more than just video surveillance
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!


Can you give any pointers as to how to proceed with this to minimized issues?
Create the VLANs across all your switches.
Move one surveillance device to the new VLAN.

Can you give me an idea how your network is laid out?
Ok, I got to the bottom of this.

Here is what I had to do, for others' reference.

  • Create a VLAN [VLAN Management -> Create VLAN]
  • Set the port to be "Forbidden" in the current VLAN and click Apply. [VLAN Management -> Port to VLAN]
  • Set the port to be in the proper VLAN by selecting the VLAN dropdown and clicking Go. Then select the "Untagged" radio button. Click Apply. [VLAN Management -> Port to VLAN]
  • Switch port to Access instead of a Trunk. Select the radio button next to the port, and click Edit button. Select Access radio button and click Apply. [VLAN Management -> Interface Settings]
  • Set the trunk to have the new VLAN tagged. Click on the radio button next to the trunk interface and click "Join VLAN". Select the new VLAN in the list and move it to the list on the right. The "Tagged" radio button should already be selected, but you can check before moving the new VLAN to the list on the right. Click Apply button. [VLAN Management -> Port VLAN Membership]

These steps are for firmware and they differed with the settings on my other SG200/300's with firmware which is a little older (

Hope it helps others.



I provided all of the details for the solution. I originally didn't have time to investigate that's why I reached out to EE, but plans changed.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial