About Virtual Local Area Networks (Vlans); Add A Vlan Tag To The External Interface - Watchguard Firebox X15 User Manual

About virtual local area networks (VLANs)

An 802.1Q VLAN (virtual local area network) is a collection of computers on a LAN or LANs that are grouped
together independent of their physical location. When you create a VLAN, you create a new software-based
network interface that you can use in your configurations.
You can use VLANs to:
Group devices according to traffic patterns, instead of proximity
Split your network into logical, hierarchical segments
Control network traffic patterns
Improve network performance and scalability
Since you can have more than one VLAN in your network, each switch in your network must be able to identify
the VLAN associated with each network packet. A VLAN-capable switch inserts four bytes of data, called a tag,
in the Ethernet header of packets that belong to a VLAN. Other switches on the network can use those tags to
send packets to the correct destination.
If you have an Edge Pro license for your Firebox X Edge e-Series device,you canconfigure the Edge to insert
VLAN tags for packets sent to a VLAN-capable switch over one or more network interfaces.

Add a VLAN tag to the External Interface

To mark traffic sent to the external interface on your Edge as part of a VLAN:
1. To connect to the System Status page, type
address of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Network > External.
The External Network Configuration page appears.
3. Click the Advanced tab.
4. Select the Enable VLAN Traffic check box.
You must have an Edge Pro license to use the VLAN tag feature.
5. Type the ID of the VLAN you want to use in the VLAN tag id text box.
6. Click Submit to save your changes.
User Guide
in the browser address bar, followed by the IP
https://
Network Settings
101