Smoothwall Vlan

[Archipelego1]

Hi there,

 

If possible, I'd like to run two vlans over the same physical Smoothwall interface.

 

I can see how I'm able to assign two IP addresses to the same Interface. However, is it possible to assign a VLAN to one of the ranges? Basically, the HP switch that the Smoothwall interface is connected to, would be configured as Tagged on one range and untagged on another.

 

For example :

 

I have IP address ranges of 10.140.0.0 and 10.150.0.0 and a Smoothwall interface, lets say Interface 1, configured with IP addresses of 10.140.0.1 and 10.150.0.1.

 

Lets say that Smoothwall interface 1 is connected to HP switch port 12.

 

HP switch port 12 is tagged on the 10.140 network (vlan1) and untagged on the 10.150 network (vlan2).

 

As this is HP, any traffic travelling over switch port 12 that isn't already Vlan tagged, will be tagged on to vlan 2 (the 10.150 network) by the HP switch.

 

I need Smoothwall to be able to send traffic over interface 1, through switch port 12, on vlan 1.

 

The only way I can think this can be done, is for Smoothwall to tag traffic on the 10.140 (vlan1) network. That way, anything not tagged by Interface 1 will be tagged by the HP switch on to vlan2

 

Is there a way in Smoothwall that you can tag IP ranges on interfaces?

 

 

 

I hope this makes sense

[robk]

You can set vlan tags on the Smoothwall interfaces. So you end up with virtual interfaces one for each vlan you set up.

[Archipelego1]

Unfortunately, I'm not able to though. The help guide talks about setting up a parent interface, but nowhere does it tell you how to set this up

[gmuirhead]

As far as I can see on mine, the parent interface is one of the NICs without any configuration on it. You'll then need to create 2 VLAN interfaces - one untagged, and one tagged, and configure the IP information on the 2 VLAN interfaces

[Archipelego1]

Ended up speaking to Smoothwall. It turned out to be a specific problem with our setup where an orphaned IP address was stopping the VLAN interface being created. They managed to locate where this was and have it setup