Configuring VLANs in Micro Edge
Overview
Micro Edge 2.0 and above enables you to create logical networks called Virtual LANs (VLAN). A VLAN enables network admins to create multiple segmented networks while utilizing a single network interface. Micro Edge supports 802.1Q tagging to extend the VLAN to a managed switch for greater connectivity and management of devices.
Creating a VLAN
The first step is adding a VLAN interface. VLAN interfaces can be bridged or addressed.
Adding an addressed VLAN interface
An addressed interface requires TCP/IP configuration and can optionally serve addresses to connected devices via DHCP. Addressed VLANs reduce broadcast traffic by isolating groups of devices into different network segments.
To add an addressed VLAN interface:
- In the Micro Edge web administration, go to Settings > Network > Interfaces.
- Click Add interface and select VLAN.
- Set the Config Type to Addressed.
- Set the required properties (refer to the VLAN Interface Properties table for more details).
- Click Save.
Adding a bridged VLAN interface
A bridged VLAN interface preserves the 802.1Q VLAN ID when traffic flows between interfaces. A bridged VLAN interface inherits the TCP/IP configuration of the interface it bridges to.
To add a bridged VLAN interface:
- In the Micro Edge web administration, go to Settings > Network > Interfaces.
- Click Add interface and select VLAN.
- Set the Config Type to Bridged.
- In Bridged To set the interface you wish to bridge to.
- Set the required properties (refer to the VLAN Interface Properties table for more details).
- Click Save.
VLAN Interface Properties:
Name | A friendly name to identify the VLAN interface. |
Config Type |
Bridged - Requires a local interface to bridge to. Addressed - Requires TCP/IP parameters to be defined on the interface. |
Interface | The physical port associated to the VLAN. VLAN interfaces can be associated to LAN or WAN interfaces. |
VLAN ID | The 802.1Q VLAN ID you wish to associate to the interface. Possible values are from 1 through 4094. |
Bridged to | If the config type is bridged, you must specify an interface to bridge to. |
IPv4 Configuration | If the config type is addressed, you must configure IPv4 TCP/IP. |
IPv6 Configuration | If the config type is addressed, you must configure IPv6 TCP/IP. If you do not wish to use IPv6 networking on the VLAN interface, set the configuration to disabled. |
DHCP | If the config type is addressed and you want to assign IP addresses automatically to devices on the VLAN, enable DHCP serving and enter the IP range. |
Assigning VLANs in Rules
After creating a VLAN interface, you can use it in Shaping Rules, Filter Rules, Access Rules, Port forwarding Rules, and WAN Rules. For more information see Rules Overview in Micro Edge.
To configure rules that refer to a VLAN:
- In the preferred configuration (e.g. Shaping Rules) click Add Rule.
- Assign a description to the rule.
- Choose the Client or Server condition depending on the type of rule you wish to configure.
- Choose the Interface Zone subtype and select the VLAN interface.
- Specify the corresponding action and click Save.
Example: Routing a VLAN to a specific WAN
In this example, a VLAN consists of guest devices and the preference is to route guests through a low bandwidth WAN.
Step 1 - Create the VLAN
Note: This step presumes the associated LAN port of Micro Edge connects to a managed switch that is configured with a corresponding 802.1Q VLAN ID.
- In the web administration, go to Settings > Network > Interfaces.
- Click Add Interface > VLAN.
- Configure the VLAN ID, Interface, and other required parameters.
Step 2 - Create a WAN Policy
To route traffic through a specific WAN, you must first create a WAN Policy.
- In the web administration, go to Settings > Routing > WAN Policies.
- Click Add WAN Policy.
- Assign a name to the policy (e.g. Low Bandwidth WAN).
- Choose the Type as Specific WAN and select the preferred WAN interface.
Step 3 - Create a WAN Rule
After you create the VLAN interface and a WAN Policy, you can create a WAN Rule to route traffic from the VLAN to a specific WAN via the policy.
- In the web administration, go to Settings > Routing > WAN Policies.
- Click Add Rule.
- Add a condition where the Client interface zone is your Guests VLAN.
- In the Action, select your low bandwidth wan policy.
- Click Save.
After you save the WAN Rule, you can review the WAN Routing report to confirm that traffic from your VLAN routes via the designated WAN.
Follow
Comments
0 comments
Please sign in to leave a comment.