Configuring VLANs in Untangle SD-WAN Router

Overview

Untangle SD-WAN Router 2.0 and above enables you to create logical networks called Virtual LANs (VLAN). A VLAN enables network admins to create multiple segmented networks while utilizing a single network interface. Untangle SD-WAN Router supports 802.1Q tagging to extend the VLAN to a managed switch for greater connectivity and management of devices.

Creating a VLAN

To create a VLAN you must first add a VLAN interface. VLAN interfaces can be bridged or addressed.

Adding an addressed VLAN interface

An addressed interface requires TCP/IP configuration and can optionally serve addresses to connected devices via DHCP. Addressed VLANs reduce broadcast traffic by isolating groups of devices into different network segments.

To add an addressed VLAN interface:

  1. In the SD-WAN Router web administration, go to Settings > Network > Interfaces.
  2. Click Add interface and select VLAN.
  3. Set the Config Type to Addressed.
  4. Set the required properties (refer to the VLAN Interface Properties table for more details).
  5. Click Add.

add_vlan.png

Adding a bridged VLAN interface

A bridged VLAN interface preserves the 802.1Q VLAN ID when traffic flows between interfaces. A bridged VLAN interface inherits the TCP/IP configuration of the interface it bridges to. 

To add a bridged VLAN interface:

  1. In the SD-WAN Router web administration, go to Settings > Network > Interfaces.
  2. Click Add interface and select VLAN.
  3. Set the Config Type to Bridged.
  4. In Bridged To set the interface you wish to bridge to.
  5. Set the required properties (refer to the VLAN Interface Properties table for more details).
  6. Click Add.

VLAN Interface Properties:

Name A friendly name to identify the VLAN interface.
Config Type

Bridged - Requires a local interface to bridge to.

Addressed - Requires TCP/IP parameters to be defined on the interface.

Interface The physical port associated to the VLAN. VLAN interfaces can be associated to LAN or WAN interfaces.
VLAN ID The 802.1Q VLAN ID you wish to associate to the interface. Possible values are from 1 through 4094.
Bridged to If the config type is bridged, you must specify an interface to bridge to.
IPv4 Configuration If the config type is addressed, you must configure IPv4 TCP/IP.
IPv6 Configuration If the config type is addressed, you must configure IPv6 TCP/IP. If you do not wish to use IPv6 networking on the VLAN interface, set the configuration to disabled.
DHCP If the config type is addressed and you want to assign IP addresses automatically to devices on the VLAN, enable DHCP serving and enter the IP range.

 

Assigning VLANs in Rules

After creating a VLAN interface, you can use it in Shaping rules, Filter rules, Access rules, Port forwarding rules, and WAN Rules. For more information see Rules Overview in Untangle SD-WAN Router.

To configure rules that refer to a VLAN:

  1. In the preferred configuration (e.g. Shaping Rules) click Create new rule.
  2. Assign a description to the rule.
  3. Choose the Client or Server condition depending on the type of rule you wish to configure.
  4. Choose the Interface Zone subtype and select the VLAN interface.
  5. Specify the corresponding action and click Create Rule.

vlan_rule_qos.png

Example: Routing a VLAN to a specific WAN

In this example, a VLAN consists of guest devices and the preference is to route guests through a low bandwidth WAN. 

Step 1 - Create the VLAN

Note: This step presumes the associated LAN port of Untangle SD-WAN Router connects to a managed switch that is configured with a corresponding 802.1Q VLAN ID.

  1. In the web administration, go to Settings > Network > Interfaces.
  2. Click Add Interface > VLAN.
  3. Configure the VLAN ID, Interface, and other required parameters.

vlan-guest-example.png

 

Step 2 - Create a WAN Policy

To route traffic through a specific WAN, you must first create a WAN Policy.

  1. In the web administration, go to Settings > Routing > WAN Policies.
  2. Click Add.
  3. Assign a name to the policy (e.g. Low Bandwidth WAN).
  4. Choose the Type as Specific WAN and select the preferred WAN interface.

wan-policy-example.png

Step 3 - Create a WAN Rule

After you create the VLAN interface and a WAN Policy, you can create a WAN Rule to route traffic from the VLAN to a specific WAN via the policy.

  1. In the web administration, go to Settings > Routing > WAN Policies.
  2. Click Create New Rule.
  3. Add a condition where the Client interface zone is your Guests VLAN.
  4. In the Action, select your low bandwidth wan policy.

wan-rule-example.png

After you save the WAN Rule, you can review the WAN Routing report to confirm that traffic from your VLAN routes via the designated WAN.

Follow
Was this article helpful?
1 out of 1 found this helpful
Have more questions? Submit a request

Comments

0 comments

Please sign in to leave a comment.

Powered by Zendesk