Cisco SA520-K9 Administration Guide - Page 49

Networking Configuring the LAN 2 NOTE VLAN ID 1 is reserved for the default VLAN, which is used for untagged frames received on the interface. VLAN IDs 4092 is reserved and cannot be used. • Inter VLAN Routing Enable: Check the box if you want to allow the SA500 to route traffic between this VLAN and other VLANs that also have interVLAN routing enabled. Uncheck the box to disable inter-VLAN routing for this VLAN. STEP 4 Click Apply to save your settings. NOTE Next steps: • Assign the VLANs to LAN ports. For more information, see Assigning VLANs to LAN Ports, page 49. • Set up VLAN subnets. For more information, see Multiple VLAN Subnets, page 50. Assigning VLANs to LAN Ports To assign a VLAN to a LAN port, choose the mode and assign VLAN membership. STEP 1 Click Networking > LAN > Port VLAN. The Port VLANs window opens. The existing port VLAN settings appear in the Port VLANs table. STEP 2 To update the settings for a port, click the Edit button. STEP 3 In the VLAN Configuration area, enter the following information: • Mode: Choose one of the following options: - Access: The access port is a member of a single VLAN. All data going into and out of the access port is untagged. By default, all VLAN ports are in access mode. Access mode is recommended if the port is connected to a single end-user device which is VLAN unaware. If you choose this option, also enter a VLAN ID for the port, in the PVID field. - General: The port is a member of a specified set of VLANs. The port sends and receives both tagged and untagged data. Untagged data coming into the port is assigned the specified PVID. Data that is sent out of the port from the same PVID is untagged. All other data is tagged. Cisco SA500 Series Security Appliances Administration Guide 49