1Q tagging to separate multiple VLANs on the same cable. (Practically all switches "with VLAN capabilities" will support 802. )That's easy to do using 802. We want to split the ISP connections so that we can effectively share these ISP connections at the outside edge of our network. I have done this in the past by using a dedicated 3750 switch to create two sets of L2 access switch ports in separate VLANs (one for. I finally grasp how to split up an ISP connection for two firewalls, using a switch. You can do that, using a switch! You could even do this with a dumb switch, but let's. All access points are on the POE switch, all wired clients are on the LAN switch Lets split our user vlan 10 into two halves of the larger whole. 254 Setup the Interface on the secondary WiFi DHCP server/ router (in my case. every port on a switch can be mapped to a particular VLAN. ) Although the latter two classes are "untrusted" from your point of view, they're also "untrusted" from each. Can I use one of the access switches and put three ports on a new VLAN and have the circuit connect to one port with the firewalls connected to the other two? If so, should the traffic be tagged or untagged? If not, then what are my options? There is only one LAN port on the circuit router.