Netgear FVS336G-300NAS Specifications download pdf (Page 117)

100

101

Configure the IPv4 LAN Settings

117

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3

Port-Based VLANs

The VPN firewall supports port-based VLANs. Port-based VLANs confine broadcast traffic to

the LAN ports.

Even though a LAN port can be a member of more than one VLAN, the port can have only

one VLAN ID as its port VLAN identifier (PVID). By default, all four LAN ports of the VPN

firewall are assigned to the default VLAN, or VLAN 1. Therefore, by default, all four LAN ports

have the default PVID 1. However, you can assign another PVID to a LAN port (see

Assign

VLAN Profiles on page 117).

After you create a VLAN profile and assign one or more ports to the profile, you must enable

the profile to activate it.

You cannot remove the VPN firewall’s default VLAN. All untagged traffic is routed through the

default VLAN (VLAN 1), which you must assign to at least one LAN port.

Note the following about VLANs and PVIDs:

• One physical port is assigned to at least one VLAN.

• One physical port can be assigned to multiple VLANs.

• When one port is assigned to multiple VLANs, the port is used as a trunk port to connect

to another switch or router.

• When a port receives an untagged packet, this packet is forwarded to a VLAN based on

the PVID.

• When a port receives a tagged packet, this packet is forwarded to a VLAN based on the

ID that is extracted from the tagged packet.

When you create a VLAN profile, assign LAN ports to the VLAN, and enable the VLAN, the

LAN ports that are members of the VLAN can send and receive both tagged and untagged

packets. Untagged packets that enter these LAN ports are assigned to the default PVID 1;

packets that leave these LAN ports with the same default PVID 1 are untagged. All other

packets are tagged according to the VLAN ID that you assigned to the VLAN when you

created the VLAN profile.

In a typical scenario for a configuration with an IP phone that has two Ethernet ports, one port

is connected to the VPN firewall, and the other one to another device.

Packets coming from the IP phone to the VPN firewall LAN port are tagged. Packets passing

through the IP phone from the connected device to the VPN firewall LAN port are untagged.

When you assign the VPN firewall LAN port to a VLAN, packets entering and leaving the port

are tagged with the VLAN ID. However, untagged packets entering the VPN firewall LAN port

are forwarded to the default VLAN with PVID 1; packets that leave the LAN port with the

same default PVID 1 are untagged.

Assign VLAN Profiles

The following procedure describes how to assign existing VLAN profiles (which includes the

default VLAN) to LAN ports.

1 2 ... 112 113 114 115 116 117 118 119 120 121 122 ... 692 693

Comments to this Manuals

No comments

Netgear FVS336G-300NAS Specifications Page 117

Comments to this Manuals