topic Re: TRUNK Configuration of LAN Switchports on a 1590 in Spark Firewall (SMB)

TRUNK Configuration of LAN Switchports on a 1590

championc1 — Thu, 06 Mar 2025 16:03:01 GMT

I am trying to use several of the LAN ports on a 1590 for AP's, so I want to configure the ports as TRUNKs

I am working with LAN Ports 5 thru 8

I created a Bridge Group, but I could only create a Vlan against the physical ports for creating Layer3 interfaces. I then created Vlans which are assigned to another physical port in the bridge, and associated this to the Bridge Group

I this the way to achieve what I am trying to do, or how should I configure it ?

See screenshot attached for what I have created.

Thanks in advance

Re: TRUNK Configuration of LAN Switchports on a 1590

AkosBakos — Thu, 06 Mar 2025 19:00:55 GMT

Hi @championc1

Clarify this a little bit.

Do you want to create a bond with two member interfaces and use it as trunk?

Bridge IF:

Bridge interfaces connect two different interfaces (bridge ports). Bridging two interfaces causes every Ethernet frame that is received on one bridge port to be transmitted to the other port. Thus, the two bridge ports participate in the same Broadcast domain (different from router port behavior).

Bond IF:

Check Point security devices support Link Aggregation, a technology that joins multiple physical interfaces into one virtual interface, known as a bond interface.

So which one?

Akos

Re: TRUNK Configuration of LAN Switchports on a 1590

championc1 — Fri, 07 Mar 2025 09:30:33 GMT

Thanks @AkosBakos

I simply want multi-VLAN switchports, since, as I pointed out in my first line of the post, the plan is to connect several WiFi AP's to these switchports.

So I absolutely do NOT want a Bond

Re: TRUNK Configuration of LAN Switchports on a 1590

AkosBakos — Fri, 07 Mar 2025 09:35:48 GMT

Ok. Do you have a very simple topology for easier understanding?

Re: TRUNK Configuration of LAN Switchports on a 1590

championc1 — Fri, 07 Mar 2025 13:53:24 GMT

Re: TRUNK Configuration of LAN Switchports on a 1590

PhoneBoy — Fri, 07 Mar 2025 17:01:05 GMT

I believe this is the correct procedure for what you're trying to do (create a bridge, add the physical interfaces and VLANs to it).
At least that's what I recall when I had this set up some time ago.
TAC should be able to confirm the correct procedure.

Re: TRUNK Configuration of LAN Switchports on a 1590

championc1 — Tue, 11 Mar 2025 10:59:15 GMT

@AkosBakos ???

Re: TRUNK Configuration of LAN Switchports on a 1590

AkosBakos — Tue, 11 Mar 2025 11:52:01 GMT

Hi @championc1

I agree with @PhoneBoy this is not an usual setuot:

I believe this is the correct procedure for what you're trying to do (create a bridge, add the physical interfaces and VLANs to it).
At least that's what I recall when I had this set up some time ago.
TAC should be able to confirm the correct procedure.

Akos

Re: TRUNK Configuration of LAN Switchports on a 1590

championc1 — Tue, 11 Mar 2025 15:46:59 GMT

So from what I have configured (as per my initial screenshot) are you able to confirm that this should indeed work ??? Can you validate it with someone who knows 100% ?

Re: TRUNK Configuration of LAN Switchports on a 1590

AkosBakos — Tue, 11 Mar 2025 15:54:08 GMT

The TAC can answer it officially

Re: TRUNK Configuration of LAN Switchports on a 1590

championc1 — Thu, 13 Mar 2025 15:33:39 GMT

If I create the Bridge, add the Vlans to that Bridge, and then I try and add a Vlan, I get the option to add the Vlan to a "Local Port" for which I selected one of the Bridge Members. But when I select "Assigned To" and select "br0", then I can no longer assign any IP addresses to this L3, nor can I therefore enable a DHCP server too