ISP required VLAN Tag to connect

Question

Our ISP requires us to supply a VLAN TAG on the WAN connection. 
 From other discussions I have seen that I need to create a VLAN onto the interface. This I have done and it now seems to connect ok. However I'm not sure what I need to configure for the actual interface PORT - I have used LAN and DHCP - is this correct. 
 
 Using this configuration I cannot access the local LAN remotely - do I need a FIREWALL RULE as well ? 
 Thanks 
 
 Mark

Mark Stoker · Answer

I think I have figured this out. 
 
 I need to set the Physical port to WAN and not LAN. It then connect to the ISP and behaves like a 'normal' WAN interface except it has a VLAN tag. 
 
 What confused me is the WAN Link manager was showing the VLAN interface as connected but the DHCP WAN Interface on the same port as NOT CONNECTED - apparently this is how it should be.