topic Re: How to create Vlan trunk on 5000 series appliance in Firewall and Security Management

How to create Vlan trunk on 5000 series appliance

J_Saun — Fri, 22 Nov 2019 14:31:43 GMT

I need to create a vlan trunk with several vlans on a 5000 series appliance (cluster). I'm having trouble understanding how I configure it in the Gaia GUI. Do I add a new Bridge, Bond? I reviewed the documentation but it seemed to focus on Access Mode and Trunk mode.

If someone could point me in the right direction it would be appreciated,

Re: How to create Vlan trunk on 5000 series appliance

mdjmcnally — Fri, 22 Nov 2019 14:51:56 GMT

You simply create a VLAN Interface and select the interface that want the VLAN Interface to be on.

In the Webui

Network Interfaces

Add Interface

VLAN

Asks to fill out the VLAN ID, ie the Tag and Member of which is the Interface want to create the VLAN interface on.

Repeat until defined all the VLANs for the Interfaces.

Note that it is not supported to create VLAN Interfaces on an Interface that has an IP assigned to it.

Re: How to create Vlan trunk on 5000 series appliance

J_Saun — Fri, 22 Nov 2019 15:25:06 GMT

Thanks.

So once you do that (create and add vlans to specific int) it automatically becomes a trunk?

Re: How to create Vlan trunk on 5000 series appliance

mdjmcnally — Fri, 22 Nov 2019 15:30:15 GMT

Yes Check Point doesn't have a concept of Access Mode or Trunk Mode for the Interface,

Once you add a VLAN Interface then the connecting switchport should be configured as a VLAN Trunk.

If no VLAN Interface added then connecting switchport should be configured in Access Mode and assigned to a VLAN. The Firewall see's the traffic arrive untagged.

Re: How to create Vlan trunk on 5000 series appliance

J_Saun — Fri, 22 Nov 2019 15:36:07 GMT

Ok. Page 75 of the Gaia R80.20 config guide talks about Access and Trunk mode which confused me. Is there another document that details the steps you specified above? Just want to have the CP doc's.

Re: How to create Vlan trunk on 5000 series appliance

PeterWilhelmson — Mon, 25 Nov 2019 10:03:46 GMT

Thats on Bridge interface ("VLAN traffic can pass through a Bridge interface in Access mode, or in Trunk mode".

Have a look at the section "Configuring VLAN Interfaces - Gaia Portal" a few pages up.

Regards.

Re: How to create Vlan trunk on 5000 series appliance

mdjmcnally — Mon, 25 Nov 2019 10:51:07 GMT

Same Document, directly above where talks about Access and Trunk when used with BRIDGE mode.

Talks about how to create VLAN interfaces.