topic Re: Trunking SG mgmt port in Hyperscale Firewall (Maestro)

Trunking SG mgmt port

David_Brodin — Thu, 11 Aug 2022 13:43:31 GMT

Hi,

We're wondering if it's possible to trunk an SG's eth1-mgmt1 port?

We'd like have an IP on the physical port, and add a vlan on top.

In SG clish we get a warning that it's not possible to add a vlan on top of eth1-mgmt1, but in GAiA we don't get the same warning. However the vlan is not tagged on MHO side as uplinks are.

BR,

DavidB

Re: Trunking SG mgmt port

Dario_Perez — Thu, 11 Aug 2022 14:00:32 GMT

On Management port we do not support vlan tag/ vlan trunk, Just access.

if you need to share the port for other security group, you must have the same segment for manage both security groups

Re: Trunking SG mgmt port

David_Brodin — Thu, 11 Aug 2022 14:06:09 GMT

Thanks! We we're hopeful but now we know for sure.

Not really share the port with other SGs. We're setting up an L2 network for logs/policy install etc but of course need to keep ssh/web-access to the SG.

Anyway, thank you for your quick answer!

Re: Trunking SG mgmt port

Chris_Atkinson — Thu, 11 Aug 2022 14:14:16 GMT

Not currently supported per sk148074 (reference: 00846789)

If this is important to you please discuss it as an RFE with your local SE.