correct way to create 'outside' VLAN??

[tommls]

On our HP switches we have an 'Outside' VLAN where any device connected to these VLAN ports can use the ISP's 'outside' IP addressing for direct Internet access to bypass our firewall. We use this for videoconferencing devices.

What is the correct way to do this on a Cisco

Presently I have ports 1-4 in vlan 50 Outside as 'untagged,' and the same ports as 'forbidden' in vlan 1 Default.

Is this the correct configuration?? In HP switches these ports in vlan 1 Default would be configured 'No' and 'tagged' in vlan 50 Outside...

Tried talking to Cisco but their phone support is not working...

Thank you, Tom

[Dale Miller]

Thomas,

I assume you want to configure a trunk on the Cisco device to support both the forbidden and outside VLAN to the same server. This can be easily accomplished configuring a dot1q trunk and pruning it to allow only VLAN 1 and 50. You have the ability to configure the native vlan (untagged) to match your current implementation.

If you can tell me what Cisco device(s) in question I can provide documenation to assist.

Thanks,
Dale

[tommls]

Hmmm...I know HP and Cisco have different definitions of 'trunk.'

I need 4 ports on an SFP-300-48 switch to have devices connected to them which use ISP-assigned IP, gateway, etc. to directly go out to the Internet.

No internal traffic whatsoever to these ports, only inbound and outbound traffic to the videoconferencing hardware on these ports.

On these 4 ports no vlan 1 traffic is needed or wanted, we want vlan 50 completely separate and we want no vlan50 traffic mingling with vlan1 traffic.

Why is this so difficult to explain??

vlan50 ports are already untagged, they are 'forbidden' for vlan1, I finally got cisco support and they said configure them to 'access' not 'trunk,' initial testing seemed not to work but the SFP-300-48 is presently not in the patch panel room...

each port goes to a different videoconferencing hardware with its own IP from the ISP, uses the ISP-supplied gateway, the ISP's DNS

In our HP switches these ports in vlan 1 Default are configured 'No' and 'untagged' in vlan 50 Outside.

Thank you, Tom