Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Kerio Control VLAN access port and trunk ports (How to setup tagged / untagged access ports and trunk ports)
fsulik is currently offline fsulik

Messages: 2
Karma: 0
I have a working Kerio Control 3110 Firewall in our network.

Port 2 has a PC network 192.168.1.x
and is assigned IP address
and provides DHCP for that subnet

Port 4 has a MAC network 10.3.3.x
and is assigned IP address
and provides DHCP for that subnet

Port 7 connects to the Internet Router

On Port 6, we are adding a WiFi network with a Wireless Lan Controller to our system. The Wifi will
provide 2 separate SSIDs (PC's will use VLAN 101, and MAC's will use VLAN 1 )

In order to make the system work I would like to do the following if possible.

In Kerio,

Assign Port 2 as VLAN 101 (access port - no vlan tagging)
Assign Port 4 as VLAN 1 (access port - no vlan tagging)
Assign Port 6 as a VLAN trunk port (VLAN 1, 101 tagged)

Is what I want to do possible ?
Brian (GFI/Kerio) is currently offline Brian (GFI/Kerio)

Messages: 806
Karma: 84
Yes it should be possible. Yes you'll need to configure standalone ports, although it sounds like you've already managed this part. Here is the help topic in case pliance/configuring-ethernet-ports-in-kerio-control-hardware -appliances-1996.html

Regarding VLANs and trunking/tagging, this topic describes how to create sub interfaces (VLANs). The ID you set is what will be tagged configuring-vlans-1229.html

Note that Kerio Control won't tag any traffic unless you've configured a VLAN sub interface. So ports 2 and 4 shouldn't need any modification. Regarding port 6, create a sub interface with ID 101. It will show up in the interfaces where you can move it to your preferred interface group. You can also rename it to VLAN 1.

Brian Carmichael
Instructional Content Architect
fsulik is currently offline fsulik

Messages: 2
Karma: 0
Thanks very much. We want to get a wifi test network working, and then deploy it throughout the building
Previous Topic: Allow specific users for access internet
Next Topic: DHCP Server restart
Goto Forum:

 ] [ PDF ]

Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Jan 20 02:27:02 CET 2018

Total time taken to generate the page: 1.10389 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.