Manual WAN Multi VLAN

WAN Multi-VLAN

Location: Connection → Basic, in the WAN section

Some ISPs deliver more than one service down the same physical fibre/DSL line, each tagged with its own VLAN ID — for example internet on VLAN 10, an IPTV set-top-box feed on VLAN 20, and VoIP on VLAN 30. Older Gargoyle only supported a single "Use Custom VLAN" checkbox on the WAN connection. This feature replaces that with an editable table so ISP triple-play setups like this can be configured without SSHing in and hand-editing switch_vlan/device UCI sections.

Note: this is a different feature from the LAN VLAN Manager — that one splits your internal LAN into isolated networks. This one is about how the router presents itself to your ISP's VLAN-tagged handoff.

Which version of this you'll see

The Basic page shows one of two things depending on your router's switch hardware, and you don't choose between them — it's automatic:

• Legacy single-VLAN checkbox (older swconfig-based switch hardware) — a single "Use Custom VLAN" checkbox and a VLAN ID field, unchanged from earlier Gargoyle versions.
• Multi-row VLAN table (modern DSA-based switch hardware) — the new table described below.

Using the table (DSA hardware)

Add a row for each VLAN your ISP hands you:

Field	Meaning
VLAN ID	The tag number your ISP told you to use for that service.
Description	A note for yourself (e.g. "Internet", "IPTV", "VoIP") — shown next to the row so the table stays readable once you have more than one.

Behavior:

• The lowest VLAN ID in the table becomes your primary WAN connection — this is exactly the same as today's plain single-VLAN WAN, it's just derived automatically from whichever row has the smallest ID rather than being a separate setting.
• Every other row gets its own independent WAN interface and firewall zone, each running its own DHCP client against the ISP for that VLAN, NAT-masqueraded the same way your primary WAN is. This is what makes an IPTV set-top-box or a VoIP ATA plugged into the router actually work when the ISP requires each service to authenticate/lease separately on its own tag.
• A device that needs to reach one of these extra WAN VLANs specifically (rather than the internet at large) can be targeted directly from Port Forwarding's source-zone selector — see below.

Interaction with Port Forwarding

Because each extra WAN VLAN row becomes its own firewall zone, Port Forwarding and Open Ports rules can choose which WAN connection a forward applies to, instead of always assuming the primary wan zone. This matters if, say, your IPTV provider's VLAN needs a specific port forwarded to your set-top-box — you can target that forward at the IPTV VLAN's zone specifically rather than your primary internet connection.

Safety

Like the LAN VLAN Manager, changing your WAN VLAN configuration goes through Gargoyle's safe-apply auto-revert: if the new config doesn't come up correctly (e.g. a typo'd VLAN ID that your ISP's switch rejects, cutting off your primary internet), the router reverts to the previous working configuration automatically rather than leaving you disconnected.

See also

• LAN VLAN Manager
• Port Forwarding