can I create a single vlan that spans across multiple firewalla gold ports?

Follow

maximus

• March 18, 2022 15:09
• Edited

I have a FWG and want to create 3 VLAN's (home, IoT, guest). Note that....

• my home devices span across multiple firewalla ports

• my IoT devices span across multiple firewalla ports

• my guest devices span across multiple firewalla ports

Can I create these 3 VLANs that span across multiple FWG ports?

I looked at your documentation for "building network segments". Example # 4 is close to what I want to do. However in your example, you are working off of 1 firewalla port. I have devices that span across more than 1 FWG port. Will FWG allow me to create such vlans?

0

• 

  Michael Bierman

  • March 18, 2022 17:41

  Can I create these 3 VLANs that span across multiple FWG ports?

  Yes, with a managed switch. Here's the idea: 

  Say you have FWG (port 1)  connected to a managed switch. Connected to that switch you have an IoT device (e.g. a printer or camera) and a computer (not IoT). 

  ISP > FWG  (port 4)

  FWG (port 1) > switch port 1

  This will be a trunk port meaning traffic tagged for IoT or the regular LAN can go from FWG to the switch. You need to tell both the switch and Firewalla that this is what you are doing. 

  Now you configure the switch: 

  Switch port 2 > Printer Tell the switch that all traffic on this port is for the IoT VLAN

  Switch port 3 > computer tell the switch that all traffic on this port is for the regular LAN

  In your case you also have WVLANs. You need to tell ui which VLAN  each SSID is responsible for. There is no way to trunk WVLANs. an SSID is associated with a single VLAN.  

  0

  Comment actions Permalink

Please sign in to leave a comment.