or you must be use other router device
if you have any router device for example cisco router
must be create 3 sub interface on lan interface
for example
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
description fordownload
encapsulation dot1Q 2 (for vlan 2)
ip address 10.0.10.1 255.255.255.0
ip access-group 10 out
ip nat inside
no snmp trap link-status
!
interface FastEthernet0/0.2
description forguest
bandwidth 1024
encapsulation dot1Q 3 (for vlan 3)
ip address 10.0.11.1 255.255.255.0
and connect switch all vlan tag port