Modifying An Ethernet Interface (Advanced Mode); Creating A Vlan; Vlan Attached To A Single Interface (Vlan Endpoint) - Stormshield SN series Configuration Manual

Interface's bandwidth (for information only)
Bandwidth

Modifying an Ethernet interface (advanced mode)

To configure an interface in a network which is not part of a bridge you need to take it out of the
bridge directory using the mouse. You may then configure the interface parameters.
During this detachment, the address range window will appear.
Fixed IP (static)
Dynamic IP (obtained
by DHCP)
Once the interface is outside the bridge, you will be able to access the parameters of the interface
described in the chapter "Modifying an Ethernet interface (in bridge mode)".

Creating a VLAN

VLANs are configured via a wizard that allows you to create the interface easily.
Select the interface or the bridge for which you wish to associate a VLAN. Then click on Add and
Add a VLAN.
Select the type of VLAN you wish to create.
VLAN attached to a
single interface (VLAN
endpoint)
VLAN attached to 2
interfaces (crossing
VLAN)

VLAN attached to a single interface (VLAN endpoint)

VLAN identification
Parent interface
Name
Comments
Color
VLAN IDs
This VLAN is
Page 191/448
Defines the throughput on an interface. This is an automatic entry that is not
compulsory: it is used for monitoring in the calculation of bandwidth.
By selecting this option, the interface will have a static address range. In this case, its
IP address and network mask must be indicated.
By selecting this option, the interface will be defined by DHCP. In this case, a DHCP
hostname and a lease time must be indicated.
Stormshield Network firewalls can be placed at the end of VLANs to add or remove a
VLAN tag. The firewall carries out the filtering and takes care of communications
between the VLANS and the networks connected to the other firewall interfaces.
The firewall recognizes the VLANs as belonging to virtual interfaces, which enables
them to be fully integrated into the company's security system.
If you select this option, by clicking on Next, the screen for Step 2 will appear. The
creation process takes place in 2 steps.
This option allows creating a crossing VLAN, meaning a bridge containing 2 VLANs with
the same ID.
If you select this option, by clicking on Next, the screen for Step 3 will appear
Select the interface to which the VLAN will be attached.
Enter a unique name for your VLAN (Cf. Appendix M: Prohibited names).
You may also enter a description.
Color assigned to the VLAN.
This field allows specifying the value to be associated with the VLAN in packets
passing through the network. This tag identifies the VLAN and is used at the Ethernet
level. It must be unique and be any value between 1 and 4094 inclusive.
Indicate if you wish to have an external or internal interface.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
INTERFACES