VLAN ID Ranges & Reserved IDs
Standard and extended VLAN ID ranges, reserved IDs, and the IDs you should avoid assigning.
The 12-bit VLAN tag in IEEE 802.1Q allows 4,096 VLAN IDs, but not all of them are freely assignable. ID 0 is reserved for priority tagging, 1002-1005 are preassigned to legacy FDDI and Token Ring networks on many platforms, 4095 is reserved for implementation use, and ID 1 is the default native VLAN that most switches use until you change it.
Beyond the reserved IDs, the assignable space is split into the normal range (2-1001), supported on every 802.1Q switch, and the extended range (1006-4094), which is available on modern platforms but behaves differently: on Cisco IOS, extended-range VLANs are not propagated by VTP, and some features do not apply to them. When you plan a VLAN numbering scheme, document which IDs are reserved and which range you standardize on - the VLAN & Subnet Naming table pairs with this one.
| VLAN IDs | Range Type | Assignable | Notes |
|---|---|---|---|
| 0 | Reserved | No | Cannot be assigned; used for 802.1Q priority tagging |
| 1 | Default VLAN | Avoid | Default native VLAN on most switches; change it before deployment |
| 2-1001 | Normal range | Yes | Usable on all 802.1Q switches |
| 1002-1005 | Reserved | No | Default FDDI and Token Ring VLANs on Cisco IOS |
| 1006-1024 | Extended range | Platform-dependent | Not propagated by VTPv1/v2 on Cisco; check vendor support |
| 1025-4094 | Extended range | Yes | Usable with the 12-bit VLAN tag; confirm platform support |
| 4095 | Reserved | No | Reserved for implementation use per IEEE 802.1Q |
Frequently Asked Questions
What VLAN IDs should I use?
Use IDs from the normal range (2-1001) for day-to-day VLANs, since every 802.1Q switch supports them. Reserve ID 1 for the native VLAN or change it away from the default, avoid 1002-1005 (reserved for FDDI and Token Ring on many platforms), and treat 0 and 4095 as reserved. The extended range (1006-4094) is available but platform-dependent.
Why is VLAN 1 not recommended?
VLAN 1 is the default native VLAN on most switches, and every untagged port belongs to it out of the box. Because it is so commonly used for management and control traffic, it is a frequent target for VLAN hopping attacks, and best practice is to change the native VLAN and move management traffic to a dedicated VLAN.
What is the difference between the normal and extended VLAN range?
The normal range (2-1001) is supported on all 802.1Q switches and interoperates with older protocols like VTP. The extended range (1006-4094) is only available on modern hardware and firmware, is not propagated by VTPv1/v2 on Cisco, and some switch features do not apply to it.
Read More
Guides that go deeper on the same topic.
Homelab VLANs: A Beginner's Segmentation Guide
New to VLANs? Learn what VLAN segmentation is, why your homelab needs it, how to plan your first layout, and how to keep it documented as your lab grows.
VLAN Management Best Practices: From Small Office to Multi-Site Enterprise
VLAN management scales from small offices to multi site enterprises. Learn practical strategies for design, naming, trunking, security isolation, and keeping VLAN sprawl under control as your network grows.
More Reference
Explore the other reference in the toolkit.
RFC 1918 Private IP Ranges
RFC 1918 defines the private IPv4 ranges 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. See each range, host count, and common use.
Common TCP & UDP Ports
Reference list of common TCP and UDP ports: SSH, DNS, HTTP, HTTPS, SMTP, NTP, DHCP, SNMP, RDP, and more, with protocols and descriptions.
Fiber Connector Types
Reference guide to fiber optic connector types: LC, SC, ST, FC, MPO/MTP, and E2000 with polish, return loss, and typical use.
Ethernet Standards (IEEE 802.3)
Reference table of IEEE 802.3 Ethernet standards: 1000BASE-T, 10GBASE-T, 10GBASE-SR/LR, 25G, 40G, 100G, and 400G with media and distances.
RFC References for Network Engineers
Quick reference list of the essential networking RFCs every infrastructure engineer should know, from RFC 1918 to BGP, DHCP, DNS, and NTP.
Reserved & Special-Use IP Addresses
Reference table of special-use IPv4 ranges: loopback, link-local (APIPA), CGNAT, TEST-NET documentation ranges, multicast, and broadcast.
TIA-606 Cable Color Codes & Labeling Standard
TIA-606 labeling standard and cable color codes for structured cabling: blue for horizontal cabling, orange for demarcation, purple for common equipment, identifier formats, and admin classes.
Transceiver Form Factors
Reference table of optical transceiver form factors: SFP, SFP+, SFP28, QSFP+, QSFP28, QSFP-DD, CFP2, XFP, and CXP with speeds and distances.
WiFi Standards (IEEE 802.11)
Reference table of WiFi standards and generations: 802.11b through 802.11be (Wi-Fi 1 to Wi-Fi 7) with maximum speeds, frequencies, and release years.
Power Connectors & Receptacles
Reference table of data center power connectors: NEMA 5-15P, L6-30P, IEC C13/C14, C19/C20, IEC 60309, Schuko, and BS 1363 with amp and voltage ratings.
Device Naming Conventions
Standard network device naming convention: use a <site>-<role>-<number> pattern. See examples for switches, firewalls, servers, and stack members.
Interface & Port Naming
How to standardize network interface names across vendors: Cisco IOS, Juniper Junos, and NX-OS/AOS-CX conventions with examples.
VLAN & Subnet Naming
Best practices for VLAN naming: descriptive names like SRV-PROD and GUEST-WIFI paired with documented VLAN IDs and subnets.