Smoothwall - How do you change from flat network to VLANs?

[getyourfill]

I can't find a good tutorial on this anywhere for Smoothwall.

 

I would like to set up a guest VLAN that is completely unfiltered, but I'm really struggling to see how to do this on Smoothwall.

 

 

My current setup:

 

L2 managed switch -> smoothwall NIC2 [dhcp/firewall/router] -> internet

 

NIC2 has basic interface with 1 IP address added

 

I can't add a VLAN with parent interface NIC2. I can only add VLAN to other NICs. Why is that??

 

I can see how to create two DHCP servers, but I can't see how you specify which VLAN/interface the DHCP server is on. Is it just a matter of creating each DHCP server to match the network of each VLAN interface you create with the default gateway matching the IP added to the VLAN interface?

 

 

Would I set up a trunk port from my switch with both VLANs to the NIC2 on the smoothwall?

 

 

How can I get this set up without accidentally locking myself out of my smoothwall?

 

Ideally I'd like to just have all the currently untagged traffic stay working as it is and then add this second VLAN that could be unfiltered.

[robk]

From memory,

 

 

Make sure you can connect to the smoothwall from a different interface. Eg laptop connected to the management port.

 

Backup your config.. Just in case!

 

Remove the ip from the internal interface, which should then allow you to add it as a vlan interface.

 

Recreate your flat network ip on a untagged vlan port.

 

Then you can add your tagged vlan port and set up the rules as expect.

 

Expect to have to check firewall rules etc so do this when you can have some down time. And remember that config backup just in case!