Enabling Port-Based Vlans - McAfee SG310 Administration Manual

Network Setup menu options
VLAN
• The total bandwidth from the switch into the CPU is 100 Mbits/s, which is shared between the four ports.
This may limit the bandwidth available to a single port when perform general routing, packet filtering, and
other activities.
• Port-based VLANs can only be enabled if there are less than 16 total VLANs.

Enabling port-based VLANs

Use this procedure to enable a port-based VLAN, which isolates each port in the switch. This allows you to
connect different networks to each port, and to enforce firewall policies between ports.
Tip: If you previously selected 1 LAN Port, 3 Isolated Ports in the Switch Configuration step of the Quick Setup
Wizard, port-based VLANs are already enabled and a single isolated VLAN for each port has already been added.
You can also run the wizard again to select this feature, skipping the options that are already configured. To
relaunch the wizard, click the McAfee logo in the upper left above the menu, or open the console in a fresh
browser window.
From the Network Setup menu, click Network Setup. The Connections page appears
1
Next to the port-based VLAN-capable interface (Switch A on the SG560, SG560U, SG565 and SG580),
2
click the edit icon.
Figure 101 Connections page—Switch A interface
Click the Ethernet Configuration tab. The Ethernet Configuration page appears
3
McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 101).
(Figure 102).
101