Create VLan in local infrastructure using Firewall routing

[ashishd-1983]

HOW TO BUILD VLAN in L2 switch SM300 with firewall routing.

Query:

In our infrastructure we have two network zones. 1^st one is local network (back office) 2^nd one is Secure Network (FAMS).

We have 2 switches and 1 SonicWALL nsa2600 Firewall to manage our generic network.

Switch Models description

1. CISCO SM300-28

2. CISCO SM300-52

28 port switch is our uplink switch where we have created 4 port V-Lan for our Secure Network (FAMS).

52 port is our user network switch where, every user back office and secure network are connected.

What we want to do…

We want to use our SM300-52 port sharing through vLan.

In this scenario, we want 48 ports can isolate with 24 port for our secure network (FAMS) and 24 port can use for our back office network (Local network). But want to make sure that both network should not communicate with each other.

We have already created a routing rule through SonicWALL Firewall.

Our backbone MAP

As we have L2 switch so that we can route through Sonicwall Firewall.

We have already created vlan-3 for both switch to communicate but it's not done.

Could you please help me out what should I have to do here.

-Ashish

[josoneal]

Hello Ashish,

Configure one of your CISCO SM300-28 switch ports as a trunk with all those VLANs added (all tagged, except the default VLAN of course). This will connect to your Sonicwall. You will also need to connect a second switch port from your CISCO SM300-28 to a switch port to your CISCO SM300-52. This connection will also be configured as a trunk with all VLANs added. Set the appropriate VLANs to eash switched port.

You will then need to add subinterfaces on the Sonicwall for each VLAN. So if X0 is the port connected to the switch, add X0.70, X0.80, etc. to the Sonicwall, with an IP in that VLAN, and set the subinterface to be on the appropriate VLAN.

Apply your routing rules through your SonicWall rules. You can also apply any ACL rules on the Cisco switches to for further filtering.