This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VLANs on LAN

How do I create a VLAN for the LAN interface?

If I got to "Interfaces & Routing"->"Interfaces"->"New Interfaces" and select VLAN the hardware drop down to let me select the LAN interface. If I edit the LAN and make it VLAN 0 then I can add VLANs but the LAN didn't work for me so this does not seem right.

Is this software limited that you can't have VLANs on the LAN?

This thread was automatically locked due to age.

0 BarryG over 11 years ago

Hi, it should work... Try a vlan id of 2 or higher, and make sure you have the switch tagging/trunking that port.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 iamkinghenry over 11 years ago

What do I need to do to get it to work?

If I change the LAN to a VLAN then I can create VLANs. If I try to change the LAN to be a LAN again it says that it requires a dedicated interface so that's why I think this is a software limitation.
Cancel
Vote Up 0 Vote Down

Cancel
0 trollvottel over 11 years ago

Sorry but huh?
Cancel
Vote Up 0 Vote Down

Cancel
0 iamkinghenry over 11 years ago

huh, what?

Is it that difficult to add VLANs on Sophos with 2 nics? I have one for the WAN and the other for LAN & VLANs. I've done it with untangle, packet fence, pfsense, vyatta but this software doesn't do it so I'm trying to just set it up as bridge.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi, the NIC needs to either be VLAN or not VLAN... it cannot be both.

So, connect to the EXT/WAN NIC, delete the LAN NIC if enabled, and set up a new LAN NIC as type VLAN.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 iamkinghenry over 11 years ago

Thanks for confirming.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

If your switch is VLAN capable, why don't you just get rid of the VLAN 0 and use actual VLANs for all the traffic?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 iamkinghenry over 11 years ago

Yes, I could reconfigure my network for this. Do you know why the software does not support it?
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

I'm guessing it's not a common configuration.

You could post a feature request for it.

Be sure to be specific, linking to examples if possible, since it's not common.

I _think_ what you want is for the UTM to support a VLAN interface of "VLAN 0" which would accept untagged packets.
(aka Native VLAN)

The switch would have to support this as well.

Most of the info online seems to be for Cisco, e.g.
http://www.cisco.com/en/US/docs/ios-xml/ios/atm/configuration/15-mt/atm-vlan-prty-tag.html

I did find some more info at
https://en.wikipedia.org/wiki/IEEE_802.1Q#Trunk_ports_and_the_native_VLAN

My Netgear switch does have PVIDs, but it is unclear how they work with Tagged VLANs.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 iamkinghenry over 11 years ago in reply to BarryG

My switch works with a native VLAN and VLANs. It's a ToughSwitch which is nice if you have UniFi gear.

This is the only software I've come across that does not support this.
Cancel
Vote Up 0 Vote Down

Cancel