Small router firewall VLAN capable recommendations please

I need a small dual-WAN router to interface with an ISP for VOIP.
It needs to provide VLAN100 tagged on the LAN side (some older routers like RV042 won't do this).
It needs to have some ports opened - not forwarded, opened. (some newer routers won't do this).
I'd rather have a 4-5 port router as ports are unimportant here.
I'd like to add a management port/VLAN and block internet access from that port's connection.

What might you recommend?
LVL 27
Fred MarshallPrincipalAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
You can do most of what you want (including VOIP VLANs) with the Cisco RV320 / RV345 routers. (Big change from RV042)

I think Sonic Wall can also do what you want but I am much less familiar with Sonic Wall.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
While a lot of devices can do what you're seeking, including a Sonicwall.... I'm looking at your problem that led to this question, and I really believe the issue at hand can be addressed without a replacement router.

With a Sonicwall, you would create a Virtual Interface (that's their equivalent of a VLAN), which would be tagged from the very start.
Fred MarshallPrincipalAuthor Commented:
Masnrock:  Thanks!  It appears that the RV042 could be made to work based on your recommendation for how to set up the switch port it's connected to.  I've already done that with an RV320 configured as a vanilla gateway now but there remain VLAN setting issues with the RV320 and downstream propagation issues through the network switches.  Those routers seem appropriate and the VLAN thing isn't needed for the intended purpose.  But I'll likely want to add an out of band management port to the router at some point.
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

How do you want the 320 to act, as the gateway for both?
Fred MarshallPrincipalAuthor Commented:
I'm not sure what you mean "both".
The RV320 will be a standalone gateway with DHCP for the VOIP internet service and LAN (VLAN) subnet.
And, I'll want to manage the router from the main LAN subnet.
And, no other service needed from this router.
I have one set up now without using its VLAN capability and without any management connection.  It's connected to a switch Access port, for the necessary VOIP VLAN100, untagged.
This seems to work.
In getting this to work, I changed the original subnet on the router from to just as a precaution.
Now it works.

I looked at the video for setting up an RV320 and noticed that they didn't use ANY of the preconfigured VLANS - they added new ones.
I had a bit of trouble figuring out how to make the RV320 VLAN settings work as I kept getting error messages where there should have been none.  But then I didn't create any NEW VLANs.  It appears this part will be unecessary feeding into an Access switch port tied to the designated VLAN.
JohnBusiness Consultant (Owner)Commented:
OK keep up posted
Fred MarshallPrincipalAuthor Commented:
As I said earlier, I got rid of the VLAN requirement and the RV320 is working fine.
Being familiar with the interface is a help.
It's also taken the place of some "new" bricked RV042 v03s.  But that's another story.
Fred MarshallPrincipalAuthor Commented:
JohnBusiness Consultant (Owner)Commented:
You are very welcome as always and good luck with the router
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.