Vlan Mapping /Vlan Translation

[Chaminda1912]

Hi All,

I have the following issue, and it would be great if you could provide some ideas on this.

we have voice handsets and currently connecting to 3rd party switch --->checkpoint fw --- connecting to LAN switch (sw2 Trusted network).

Recently we are replacing those voice handsets  and required to create a new vlan with new dhcp scope for those new voice handsets.

My question is , how could you extend the broadcast domain across the fw to the 3rd party switch so that new handsets can communicate to our  trusted network. My idea was more in to vlan mapping solution .

Phones does not have certificates  and when the new voice handsets  connects to the switchport as it requires to go through MAB initially  and authorisation profile will allow the handset to connect to the certification server and then get a cert -->reboot and connect to the network..

Appreciate your advice on this 

chaminda

[M02@rt37]

Hello @Chaminda1912 

VLAN mapping is supported by your Firewall model ?

[Chaminda1912]

yes..but needs to clarify with the 3rd party managed team if that's been approved to implement..

[srimal99]

Have you check new vlan mapping configured end to end , 3rd party switch and firewall. Would you able to capture traffic ?