D-Link NetDefendOS User Manual page 894

2. Associate the VLANs with LAN interfaces
Go to Network > Interfaces and VPN > VLAN > Switch Management, enable port based VLAN
and set each numbered LAN interface to be associated with the relevant VLAN to get the desired
configuration.
For this example, the screenshot below shows how this would look in the Web Interface.
For the DFL-860E, the list above would continue with the following additions.
This last dialog is only available in the Web Interface for those NetDefend firewalls that support
port based VLANs.
Port Based VLAN Issues
There are some issues which the adminstrator should be aware of when setting up port based
VLANs:
• Port based VLANs cannot be mixed with VLAN trunks.
When the port based VLAN feature is used, all of the LAN interfaces act as access ports and
none can be used for 802.1q VLAN trunks.
• MAC addresses are duplicated.
The MAC addresses of all the LAN interfaces are the same. This means that a switch might
have two connections to the firewall that have two different IP addresses but the same MAC
address. For some switches this can be a problem and the situation should be avoided by
using separate switches.
Appendix E: DFL-260E/860E Port Based
894
VLAN