Switch configuration overview

Generally three or four things must be configured on VLAN capable switches:

1.    Add/define the VLANs

Most switches have a means of defining a list of configured VLANs, and they must be added before they can be configured on any ports.

2.    Configure the trunk port

The port to which the AZTCO-FW firewall will be connected must be configured as a trunk port, tagging all possible VLANs on the interface.

3.    Configure the access ports

Configure ports for internal hosts as access ports on the desired VLANs, with untagged VLANs.

4.    Configure the Port VLAN ID (PVID)

Some switches require configuring the PVID for access ports. This specifies which VLAN to use for the traffic entering that switch port. For some switches this is a one step process, by configuring the port as an access port on a particular VLAN, it automatically tags traffic coming in on that port. Other switches require this to be configured in one or two places. Check the switch documentation for details if it is not one detailed in this chapter.