The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

How VLAN tagging works?

Prev Next

The original Ethernet frame without tagging is shown below.

Original Ethernet frame without tagging
ethernet_header


In regular VLAN tagging, a tag/identifier is used to identify the traffic from VLANs.

Regular tagging
VLAN-tagged frame


In double VLAN tagging, when the frame enters the ISP network, a second VLAN tag is inserted into the frame. This tag is specific to the customer, and identifies the traffic from all the VLANs from that customer. This second tag is also known as the outer VLAN tag or Customer Identification tag (CID). The original VLAN tag is called the inner VLAN tag or VLAN identifier tag (VID).

Double VLAN tagging
vlan_double_tagging