Note: This term is used on Edge / Safe@Office device to virtually distinguish between the physical LAN ports that are connected to the same LAN Switch.
To assign a different subnet for each port, add a "new network", set it as "Port based VLAN" and assign is to a designated LAN port.
To configure a "Tag Based VLAN":
Add a "new network", set it as "Tag Based VLAN", set the tag ID that will represent the network (e.g., "4"), and set the correct Network scheme. You can create as many Tag Based VLAN as needed.
The physical link connection for all those Tag Based VLANs will be the DMZ port. The DMZ port must be assigned as VLAN Trunk. In addition, you must connect a Layer 3 switch that manages the VLAN networks themselves.
You must create static routes for inbound connections: