Assigning And Managing Vlan Profiles - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual

When you create a VLAN profile, assign LAN ports to the VLAN, and enable the VLAN, the
LAN ports that are members of the VLAN can send and receive both tagged and untagged packets.
Untagged packets that enter these LAN ports are assigned to the default PVID 1; packets that leave
these LAN ports with the same default PVID 1 are untagged. All other packets are tagged
according to the VLAN ID that you assigned to the VLAN when you created the VLAN profile.
The following is a typical scenario for a configuration with an IP phone that has two Ethernet
ports, one of which is connected to the VPN firewall, the other one to another device:
Packets coming from the IP phone to the VPN firewall LAN port are tagged. Packets passing
through the IP phone from a connected device to the VPN firewall LAN port are untagged. When
you assign the VPN firewall LAN port to a VLAN, packets entering and leaving that LAN port are
tagged with the VLAN ID. However, untagged packets entering the VPN firewall LAN port are
forwarded to the default VLAN with PVID 1; packets that leave the LAN port with the same
default PVID 1 are untagged.

Assigning and Managing VLAN Profiles

To assign VLAN profiles to the LAN ports and manage VLAN profiles:
1. Select Network Configuration > LAN Settings from the menu. The LAN submenu tabs
display, with the LAN Setup screen in view.
another VLAN profile as examples.)
Figure 3-1
LAN Configuration
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
v1.0, April 2010
(Figure 3-1 shows the default VLAN profile and
3-3