Configuring VLAN Subinterfaces (NSA series)

VLAN subinterfaces are supported on SonicWall NSA series appliances. When you add a VLAN subinterface, you need to assign it to a zone, assign it a VLAN Tag, and assign it to a physical interface. Based on your zone assignment, you configure the VLAN subinterface the same way you configure a physical interface for the same zone.

Adding a Virtual Interface

1
Navigate to the Network > Interfaces page.
2
At the bottom of the Interface Settings table, click the Add Interface drop-down menu and select Virtual Interface. The Edit Interface dialog displays.

3
Select a zone to assign to the interface. You can select LAN, WAN, DMZ, WLAN, or create a zone. The zone assignment does not have to be the same as the parent (physical) interface. In fact, the parent interface can even remain Unassigned.

Your configuration choices for the network settings of the subinterface depend on the zone you select.

•
LAN, DMZ, or a custom zone of Trusted type: Static or Transparent. LAN can also select Tap Mode (1-Port Tap).
•
WLAN or a custom Wireless zone: static IP only (no IP Assignment list).
4
Assign a VLAN tag (ID) to the subinterface. Valid VLAN ID’s are 1 to 4094, although some switches reserve VLAN 1 for native VLAN designation. You will need to create a VLAN subinterface with a corresponding VLAN ID for each VLAN you wish to secure with your security appliance.
5
Declare the parent (physical) interface to which this subinterface will belong. There is no per-interface limit to the number of subinterfaces you can assign – you may assign subinterfaces up to the system limit.
6
Configure the subinterface network settings based on the zone you selected. See these interface configuration instructions:
•
Configuring Static Interfaces
•
Configuring Interfaces in Transparent IP Mode (Splice L3 Subnet)
•
Configuring Wireless Interfaces
•
Configuring the WLAN Interface (TZ Wireless Appliances)
•
Configuring a WAN Interface
•
Configuring the NSA Expansion Pack Module Interface (NSA 2400MX and 250M Only)
•
Configuring Link Aggregation
•
Configuring Port Redundancy
•
Configuring Routed Mode
•
Configuring the U0/U1/M0 External 3G/4G/Modem Interface
•
Configuring PortShield Interfaces (TZ series, NSA 240, and NSA 2400MX)
7
Select the management and user-login methods for the subinterface.
8
Click OK.