A short reference on VLANs — what the term means, why a fiber ISP might ask for a specific "VLAN ID" before your own router can get online, and how that's different from a PPPoE username and password.
VLAN stands for Virtual LAN (Virtual Local Area Network). It's a way of splitting one physical network connection into two or more separate, logical networks that don't mix with each other — even though they're all traveling over the same wire or fiber at the same time.
To do this, network equipment attaches a small "tag" to each chunk of traffic, called a VLAN ID. Think of it like a label on an envelope: the wire itself is just one shared path, but every piece of traffic on it carries a number saying which logical network it belongs to. Equipment on both ends reads that tag and keeps the different networks sorted and separate.
One physical cable, multiple invisible "lanes" running through it. The VLAN ID is the label that says which lane a piece of traffic is in.
Some fiber internet providers run several different services over the same physical fiber line to your home — for example, regular internet traffic and TV set-top-box traffic might travel over the same strand of fiber, just tagged with different VLAN IDs so the provider's equipment can tell them apart.
Because of this, some ISPs configure their network so that it only accepts internet traffic that's tagged with one specific VLAN ID. If your router sends traffic untagged, or tagged with the wrong ID, the ISP's equipment may simply ignore it — which can look exactly like "my internet isn't working," even though the physical connection (the fiber itself, the light signal) is completely fine.
Imagine an apartment building with one mail slot that all mail comes through. Inside, the mail gets sorted into different bins based on the apartment number written on the envelope. The mail slot is the physical fiber connection. The apartment number is the VLAN ID. Mail with no apartment number, or the wrong one, doesn't reach anyone — it's not that the mail truck broke down, it's that the envelope wasn't addressed correctly for the building's sorting system.
That's why, on some fiber connections, a router plugged directly into the ONT (the small box the ISP installs that converts the fiber light signal to Ethernet) won't get online at all until it's told to tag its outgoing traffic with the correct VLAN ID. It's not a sign anything is broken — it's a required setting, the same way a Wi‑Fi password is a required setting.
It's easy to lump these together because a fiber ISP may ask for both at once, but they solve two different problems:
Some fiber ISPs (this project's context involves Hawaiian Telcom's FTTH service, as one example) may require both a VLAN ID and PPPoE credentials on the same connection: the VLAN ID gets your traffic sorted into the right lane, and the PPPoE login then authenticates your account within that lane. Neither one substitutes for the other.
Any VLAN ID mentioned as an example on this page (or elsewhere) is illustrative only, not a real value for any specific ISP. The correct VLAN ID for a given fiber connection has to come from the ISP directly, or be read off the ISP-supplied gateway's own settings — it is not something to guess at or copy from an unrelated forum post, since using the wrong VLAN ID can prevent the connection from working at all.
On most consumer router admin pages, VLAN ID is a setting under the WAN or Internet configuration section — the part of the settings that controls how the router talks to the ISP, as opposed to the Wi‑Fi or local network settings.
WAN Settings, Internet Settings, or Network → WAN.VLAN ID, VLAN Tag, or 802.1Q — these all refer to the same underlying idea (802.1Q is the name of the technical standard that defines how VLAN tagging works).If an internet connection was working fine through an ISP-supplied gateway, and a self-supplied router gets no connection at all when plugged into the same fiber line, a missing or incorrect VLAN ID is one of the first things worth checking — right alongside PPPoE credentials.