EFW Support

Support => General Support => Topic started by: jpilldev on Tuesday 04 September 2012, 04:16:55 am



Title: EFW working with VLAN
Post by: jpilldev on Tuesday 04 September 2012, 04:16:55 am
Hello.
I just intalled the Endian with 2 nics to internet and other to LAN, the LAN Nic is plugged with a Switch with VLAN support and there is 4 vlans:

  • EFW are the gateway to internet
  • The Endian LAN conection have as main ip address with the first VLAN created.
  • The hosts between vlans can connect, vlan1 with vlan2, with vlan3, with vlan4, so, the switch can route traffic between VLANS
  • The EFW cannot see hosts of other vlans, hosts of vlans cannot connect with EFW.
  • The EFW can see only hosts of the first VLAN (main ip address).

Watching the logs, the traffic from the VLANS are registered like Red Zone, so the traffic reaches EFW but not processed correctly.

How can i configure EFW to works with all the VLANS?

Thanks.


Title: Re: EFW working with VLAN
Post by: fqureshi on Tuesday 04 September 2012, 05:39:54 am
On your green zone you have to assign multiple its from each vlan .. i have worked with this scenario..and it worked for ne..just get a spare IPHONE from each vlan and assign on internal interface of Indian with correct subnet mask.


Title: Re: EFW working with VLAN
Post by: jpilldev on Tuesday 04 September 2012, 12:18:36 pm
I made that, the interface in switch is in trunk mode, the result is the same, there's no traffic from others vlans, the traffic still appears like red zone.

Thanks.


Title: Re: EFW working with VLAN
Post by: fqureshi on Tuesday 04 September 2012, 12:21:33 pm
What when you do trace to the destination? where it stops?


Title: Re: EFW working with VLAN
Post by: jpilldev on Tuesday 04 September 2012, 12:25:54 pm
when i trace, it stops in switche


Title: Re: EFW working with VLAN
Post by: mrkroket on Wednesday 05 September 2012, 08:46:56 am
What equipment is routing between LAN's?
Did you created the VLAN interfaces on Endian? They are assigned to any zone?
The switch port is configured on trunking mode?
There are inter-zone rules allowing traffic between lans?


Title: Re: EFW working with VLAN
Post by: jpilldev on Friday 07 September 2012, 01:50:14 pm
Hello.

The same switch is routing between lans, we probe with hosts in each VLAN and they can communicate.
The VLANs are in switch, we also created the zones in endian with same results.
The switch port is actually in trunk mode, efw, alsto tested in another interface no trunked mode, and just respond to the hosts in the same vlan, the traffic from other vlans are processed as traffic from red zone.
The interzone rules are enabled.

Thanks for answer.


Title: Re: EFW working with VLAN
Post by: jpilldev on Wednesday 03 October 2012, 08:45:33 am
Hi.

Any idea to resolv this?