When configuring VLANs you must define how traffic needs to be forwarded:
•
If traffic needs to be bridged between LAN and WAN you can create a single VLAN that
encompasses the WAN port and LAN ports.
•
If traffic needs to be routed then you must define four elements:
• LAN-side VLANs
• WAN-side VLANs
• Associate IP Interfaces to VLANs
• Inter-VLAN Routing Groups: configuration of routing between VLANs is done by associ-
ation of a VLAN to a Routing Group. Traffic will be routed between VLANs within a rout-
ing group. The LAN IP Ethernet Interface can be bound to multiple LAN VLANs, but
forwarding can be limited between an Ethernet LAN port and a WAN VLAN if you properly
configure Inter-VLAN groups.
Inter-VLAN groups are also used to block routing between WAN interfaces. If each WAN
IP interface is bound to its own VLAN and if you configure a different Inter-VLAN group
for each WAN VLAN then no routing between WAN IP interfaces is possible.
•
Example: to route between a VCC and all the LAN ports, which effectively is similar to
the default configuration without any VLANs:
Create a VLAN named "VccWan" consisting of vcc1, ip-vcc1, routing-group 1
Create a VLAN named "Lan" consisting of eth0.1, eth0.2, eth0.3, eth0.4, ssid1, ssid2,
ssid3, ssid4 (etc.), ip-eth-a, routing-group 1
108