SonicOS 7 System

Table of Contents

Configuring Virtual Interfaces (VLAN Subinterfaces)

When you add a VLAN subinterface, you need to assign it to a zone, assign it a VLAN Tag, and assign it to a physical interface. Based on your zone assignment, you configure the VLAN subinterface the same way you configure a physical interface for the same zone.

To add a virtual interface

  1. Navigate to NETWORK | System > Interfaces.

  2. In Interface Settings, select Virtual Interface from + Add Interface. The Add Virtual Interface dialog displays.

    Add Virtual Interface Settings

  3. Select a Zone to assign to the interface. You can select LAN, WAN, DMZ, WLAN, or a create a new zone. The zone assignment does not have to be the same as the parent (physical) interface. In fact, the parent interface can even remain Unassigned.

    Your configuration choices for the network settings of the subinterface depend on the zone you select.

    • LAN, DMZ, or a create a new zone of Trusted type: Static or Transparent
    • WLAN or a custom Wireless zone: static IP only (no IP Assignment list).

  4. Assign a VLAN tag (ID) to the subinterface in the VLAN Tag field. Valid VLAN IDs are 0 (default) to 4094, although some switches reserve VLAN 1 for native VLAN designation, and VLAN 0 is reserved for QoS. You need to create a VLAN subinterface with a corresponding VLAN ID for each VLAN you wish to secure with your appliance.

    If X-Series switches are provisioned, VLAN IDs from 0 - 35 are internal VLAN IDs and cannot be used for VLAN subinterfaces.

  5. Select the parent (physical) interface to which this subinterface belongs from Parent Interface. There is no per-interface limit to the number of subinterfaces you can assign – you can assign subinterfaces up to the system limit.
  6. Configure the subinterface network settings based on the zone you selected. See the interface configuration instructions:
  7. Select the management and user-login methods for the subinterface.
  8. Click OK.