Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Kerio Control VLAN access port and trunk ports (How to setup tagged / untagged access ports and trunk ports)
  •  
fsulik is currently offline fsulik

Messages: 2
Karma: 0
Send a private message to this user
I have a working Kerio Control 3110 Firewall in our network.

Port 2 has a PC network 192.168.1.x
and is assigned IP address 192.168.1.1
and provides DHCP for that subnet

Port 4 has a MAC network 10.3.3.x
and is assigned IP address 10.3.3.1
and provides DHCP for that subnet

Port 7 connects to the Internet Router

On Port 6, we are adding a WiFi network with a Wireless Lan Controller to our system. The Wifi will
provide 2 separate SSIDs (PC's will use VLAN 101, and MAC's will use VLAN 1 )

In order to make the system work I would like to do the following if possible.

In Kerio,

Assign Port 2 as VLAN 101 (access port - no vlan tagging)
Assign Port 4 as VLAN 1 (access port - no vlan tagging)
Assign Port 6 as a VLAN trunk port (VLAN 1, 101 tagged)

Is what I want to do possible ?
  •  
Kerio/GFI Brian is currently offline Kerio/GFI Brian

Messages: 852
Karma: 90
Send a private message to this user
Yes it should be possible. Yes you'll need to configure standalone ports, although it sounds like you've already managed this part. Here is the help topic in case https://manuals.gfi.com/en/kerio/control/content/hardware-ap pliance/configuring-ethernet-ports-in-kerio-control-hardware -appliances-1996.html

Regarding VLANs and trunking/tagging, this topic describes how to create sub interfaces (VLANs). The ID you set is what will be tagged https://manuals.gfi.com/en/kerio/control/content/interfaces/ configuring-vlans-1229.html

Note that Kerio Control won't tag any traffic unless you've configured a VLAN sub interface. So ports 2 and 4 shouldn't need any modification. Regarding port 6, create a sub interface with ID 101. It will show up in the interfaces where you can move it to your preferred interface group. You can also rename it to VLAN 1.

Brian Carmichael
Instructional Content Architect
  •  
fsulik is currently offline fsulik

Messages: 2
Karma: 0
Send a private message to this user
Thanks very much. We want to get a wifi test network working, and then deploy it throughout the building
Previous Topic: Allow specific users for access internet
Next Topic: DHCP Server restart
Goto Forum:
  

 ]

Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Sep 21 06:44:24 CEST 2018

Total time taken to generate the page: 0.93797 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.