WAN interface with VLAN TAG

Hi,

wich Mode do you use? Are you trying to set up a PPPoE (DSL) or Static?

Hi Crishtopher. Thank you for your reply.

What I have done in the SG was this (answer given in this forum). It worked fine.

"Per your screenshot you are using a static IP address, no PPPoE involved. In that case, as dirkkotte pointed out, you would set your WAN interface as type "Ethernet VLAN", bind it to a hardware port (eth1, eth2, etc) and set 20 at "VLAN Tag". Other than that it's just IP addresses, gateways and netmasks as usual.

Per your screenshot you are using a static IP address, no PPPoE involved. In that case, as dirkkotte pointed out, you would set your WAN interface as type "Ethernet VLAN", bind it to a hardware port (eth1, eth2, etc) and set 20 at "VLAN Tag". Other than that it's just IP addresses, gateways and netmasks as usual."

Hi MarcoTeixeira,

To configure vLAN on any interface first you need to assign any Network Zone and select IP Assignment to DHCP. Now you can go and add vLAN interface.

Kindly refer KBA

Regards, Ronak.

This KBA is for VLAN on the LAN interface.

We have the same issue. Our ISP requires a VLAN tag on the WAN interface.

I have configured a VLAN interface on the physical WAN interface - this has the STATIC IP details and the VLAN TAG

On the WAN link manager this connects fine.

However, the WAN port has been configured as WAN using DHCP - this shows as not connected in the WAN link manager.

No traffic flows from the WAN port onto our LAN ? Do we need to configure further firewall rules to allow this to happen.

Hello Mark Stapleton

You will need firewall rule for every traffic. If you want to allow traffic from one zone to other or one interface to another.

Regards, Ronak.

But both the VLAN and the WAN are on the same Physical port ?

Can you provide me with an example ?

You can use PPPoE as a mode with DHCP and "Preference IP" plus VLAN ID.

This won't work as we only have Static IP details from the ISP (no PPoE login)

Hi Mark ,

The configuration shown below should work.

Hello Mark Stoker

Assume you have configured on port2 as following.

Port2 as LAN Zone with IP 192.168.10.1/24

Port2 with VLAN 20 as LAN Zone with IP 192.168.20.1/24

Port2 with VLAN 30 as WAN Zone with IP as 10.10.10.10/24 and Gateway as 10.10.10.1

Scenario 1.

Allow traffic between 192.168.10.X to 192.168.20.x 

Src Zone: LAN / Src Net: 192.168.10.x/24

Dst Zone: LAN / Dst Net: 192.168.20.x/24

Service: Any

Scenario 2.

Allow traffic from LAN 192.168.10.x and 192.168.20.x  to WAN.

Src Zone: LAN / Src Net: Any

Dst Zone: WAN / Dst Net: Any

Service: Any

Rewrite Source Address: Enable

Primary Gateway: WAN-Link Load Balance

Similar you can also create business rule to forward WAN to LAN traffic.

Regards, Ronak.