Cisco ISA500 Series Administration Manual page 126

Networking
Configuring the VLAN
STEP 4
STEP 5
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
Choose the ports from the Port list and click ->Access to add them to the
Member list and set the selected ports as Access mode. All packets going
into and out of the Access ports are untagged. Access mode is
recommended if the port is connected to a single end-user device which is
VLAN unaware.
Alternatively, you can choose the ports from the Port list and click ->Trunk
to add them to the Member list and set the selected ports as Trunk mode. All
packets going into and out of the Trunk port are tagged. Untagged data
coming into the port is not forwarded. Trunk mode is recommended if the
port is connected to a VLAN-aware switch or router.
This setting will change the port type and access mode of the
NOTE
selected physical ports. For example, choose a port that was set as a
DMZ port and add it to the Member list. The DMZ port will be changed
to a LAN port. Changing the port type will wipe out all configurations
relative to the physical port.
• Zone: Choose the zone to which the VLAN is mapped. By default, the
DEFAULT VLAN is mapped to the LAN zone and the GUEST VLAN is mapped
to the GUEST zone.
In the DHCP Pool Settings tab, choose the DHCP mode from the DHCP Server
drop-down list.
• Disable: Choose this option if the computers on the VLAN are configured
with static IP addresses or are configured to use another DHCP server.
• DHCP Server: Allows the security appliance to act as a DHCP server and
assigns IP addresses to all devices that are connected to the VLAN. Any new
DHCP client joining the VLAN is assigned an IP address of the DHCP pool.
• DHCP Relay: Allows the security appliance to use a DHCP Relay. If you
choose DHCP Relay, enter the IP address of the remote DHCP server in the
Relay IP field.
If you choose DHCP Server as the DHCP mode, enter the following information:
• Start IP: Enter the first IP address in the DHCP range.
• End IP: Enter the last IP address in the DHCP range. Any new DHCP client
joining the VLAN is assigned an IP address between the Start IP address and
End IP address.
4
120