# Configure VLAN Interfaces

VLANs (Virtual LANs) allow you to segment your network by isolating traffic into different broadcast domains on the same physical network infrastructure.

You can add and delete VLAN interfaces on your Beam device from the web UI or the command line.

> **Info:** Configuring VLANs from the UI is available in Beam 1.9 and later.

## Configure VLANs using the UI

You can add, edit, and delete VLAN interfaces from the **System Settings** page. To rename an interface or change its VLAN ID or parent interface, you must add a new interface and delete the old one.

### Add a VLAN interface

1. Go to **Servers**, select a server, and open the **System Settings** tab.
2. In the **Network devices** section, click **+ Add VLAN interface**.
3. In the **Add VLAN Interface** dialog, select the **Parent Interface** and enter the **VLAN ID**.
4. Click **Add VLAN interface**. The new interface appears in the list.
5. Configure its settings, such as IP address and firewall zone. See [Configure network interfaces](/beam/system-admin/network/configure-nics) for details.
6. Click **Save** at the bottom of the page to apply the changes.

> **Info:** The new interface is automatically named in the format `<parent_interface>.<vlan_id>`, for example, `eth1.100`.

### Delete a VLAN interface

1. Go to **Servers**, select a server, and open the **System Settings** tab.
2. In the **Network devices** section, find the VLAN interface you want to remove and click its **Delete** button.
3. In the confirmation dialog, click **Yes, delete it!**.
4. Click **Save** at the bottom of the page to apply the change.

## Configure VLANs using the command line

To manage VLANs from the command line, use the `nmcli` tool. Run these commands using SSH or directly on the device terminal.

### Add a VLAN interface

### Create the VLAN interface

Create the VLAN interface with the `nmcli connection add` command. You must specify a connection name, an interface name, the VLAN ID, and the parent physical device.

- `con-name`: A descriptive name for the connection, for example `vlan10`.
- `ifname`: The name for the new VLAN interface, for example `eth0.10`.
- `id`: The VLAN tag number, for example `10`.
- `dev`: The parent physical interface, for example `eth0`.

This example creates a VLAN with ID 10 on the `eth0` interface:

```shell
sudo nmcli connection add type vlan con-name vlan10 ifname eth0.10 id 10 dev eth0
```

### Configure the IP address

After creating the interface, configure its IP address. You can use DHCP or assign a static IP.

- **To use DHCP:**
  ```shell
  sudo nmcli connection modify vlan10 ipv4.method auto
  ```
- **To assign a static IP address:**
  ```shell
  sudo nmcli connection modify vlan10 ipv4.addresses 192.168.10.50/24 ipv4.gateway 192.168.10.1 ipv4.method manual
  ```

### Configure the firewall zone

Assign the VLAN to a firewall zone based on its purpose.

- For a VLAN on a management port, set the zone to `control`:
  ```shell
  sudo nmcli connection modify vlan10 connection.zone control
  ```
- For a VLAN on a data port, set the zone to `data`:
  ```shell
  sudo nmcli connection modify vlan10 connection.zone data
  ```

### Activate the interface

Activate the new VLAN connection to apply the configuration.

```shell
sudo nmcli connection up vlan10
```

### Delete a VLAN interface

To remove a VLAN interface, delete its `nmcli` connection. This action removes the VLAN interface and its configuration.

```shell
sudo nmcli connection delete vlan10
```