Defining A Vlan - D-Link DFL-1660 User Manual

3.4.3. VLAN
License Limitations
The number of VLAN interfaces that can be defined for a NetDefendOS installation is limited by
the parameters of the license used. Different hardware models have different licenses and different
limits on VLANs.
Summary of VLAN Setup
Below are the key steps for setting up a VLAN interface.
1. Assign a name to the VLAN interface.
2. Select the physical interface for the VLAN.
3. Assign a VLAN ID that is unique on the physical interface.
4. Optionally specify an IP address for the VLAN.
5. Optionally specify an IP broadcast address for the VLAN.
6. Create the required route(s) for the VLAN in the appropriate routing table.
7. Create rules in the IP rule set to allow traffic through on the VLAN interface.
It is important to understand that the administrator should treat a VLAN interface just like a physical
interface in that they require both appropriate IP rules and routes to exist in the NetDefendOS
configuration for traffic to flow through them. For example, if no IP rule with a particular VLAN
interface as the source interface is defined allowing traffic to flow then packets arriving on that
interface will be dropped.
VLAN advanced settings
There is a single advanced setting for VLAN:
Unknown VLAN Tags
What to do with VLAN packets tagged with an unknown ID.
Default: DropLog
Example 3.15. Defining a VLAN
This simple example defines a virtual LAN called VLAN10 with a VLAN ID of 10. The IP address of the VLAN is
assumed to be already defined in the adress book as the object vlan10_ip.
Command-Line Interface
gw-world:/> add Interface VLAN VLAN10
Note: 802.1ad is not supported
NetDefendOS does not support the IEEE 802.1ad (provider bridges) standard which
allows VLANs to be run inside other VLANs.
Ethernet=lan
IP=vlan10_ip
119
Chapter 3. Fundamentals