GFI Forums: Kerio Control » Kerio Control VLAN access port and trunk ports

Home » GFI User Forums » Kerio Control » Kerio Control VLAN access port and trunk ports (How to setup tagged / untagged access ports and trunk ports)

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Kerio Control VLAN access port and trunk ports [message #138045]

Tue, 02 January 2018 20:50

fsulik
Messages: 2
Registered: January 2018

I have a working Kerio Control 3110 Firewall in our network.

Port 2 has a PC network 192.168.1.x
and is assigned IP address 192.168.1.1
and provides DHCP for that subnet

Port 4 has a MAC network 10.3.3.x
and is assigned IP address 10.3.3.1
and provides DHCP for that subnet

Port 7 connects to the Internet Router

On Port 6, we are adding a WiFi network with a Wireless Lan Controller to our system. The Wifi will
provide 2 separate SSIDs (PC's will use VLAN 101, and MAC's will use VLAN 1 )

In order to make the system work I would like to do the following if possible.

In Kerio,

Assign Port 2 as VLAN 101 (access port - no vlan tagging)
Assign Port 4 as VLAN 1 (access port - no vlan tagging)
Assign Port 6 as a VLAN trunk port (VLAN 1, 101 tagged)

Is what I want to do possible ?

[Updated on: Tue, 02 January 2018 21:31]

Report message to a moderator

Re: Kerio Control VLAN access port and trunk ports [message #138046 is a reply to message #138045]

Tue, 02 January 2018 22:29

Kerio/GFI Brian
Messages: 852
Registered: March 2004
Location: California

Yes it should be possible. Yes you'll need to configure standalone ports, although it sounds like you've already managed this part. Here is the help topic in case https://manuals.gfi.com/en/kerio/control/content/hardware-ap pliance/configuring-ethernet-ports-in-kerio-control-hardware -appliances-1996.html

Regarding VLANs and trunking/tagging, this topic describes how to create sub interfaces (VLANs). The ID you set is what will be tagged https://manuals.gfi.com/en/kerio/control/content/interfaces/ configuring-vlans-1229.html

Note that Kerio Control won't tag any traffic unless you've configured a VLAN sub interface. So ports 2 and 4 shouldn't need any modification. Regarding port 6, create a sub interface with ID 101. It will show up in the interfaces where you can move it to your preferred interface group. You can also rename it to VLAN 1.

Brian Carmichael
Instructional Content Architect

Report message to a moderator