Nokia Network Voyager Reference Guide for IPSO 6.0 - Check Point

Gigabit Ethernet InterfacesThe Nokia implementation of VLAN supports adding a logical interface with a VLAN ID to aphysical interface. In a VLAN packet, the OSI Layer 2 header, or MAC header, contains fourmore bytes than the typical Ethernet header for a total of 18 bytes. When traffic arrives at thephysical interface, the system examines it for the VLAN layer-two header and accepts andforwards the traffic if a VLAN logical interface is configured. If the traffic that arrives at thephysical interface does not have a VLAN header, it is directed to the channel 0, or untagged,interface. In the Nokia implementation, the untagged channel-0 interface drops VLAN packetsthat are sent to the subnets on that interface.Outgoing traffic from a VLAN interface is tagged with the VLAN header. The Nokia appliancecan receive and generate fully conformant IEEE 802.1Q tags. The IEEE802.1Q standard definesthe technology for virtual bridged networks. The Nokia implementation is completelyinteroperable as a router, not as a switch.IPSO supports a maximum of 1015 VLAN interfaces. However, if you do not explicitlyconfigure the system to support this number (in the Maximum Number of VLANs Allowed textbox), the default maximum is 950 VLAN interfaces.This is system limit and not limited tospecific interface.To configure a VLAN Interface1. Click Interfaces under Interface Configuration in the tree view.2. Click the link to the physical Ethernet interface for which you want to enable a VLANinterface.The physical interface page for that interface is displayed.3. Enter a value to identify the VLAN interface in the Create a new VLAN ID text box.The range is 2 to 4094. The values 0 and 4095 are reserved by the IEEE standard. VLAN ID1 is reserved by convention. There is no default.4. Click Apply.The new logical interface for the VLAN appears in the Logical Interfaces field with thename eth-sXpYcZ, where X is the slot number, Y is the physical port number and Z is thechannel number. The channel numbers increment starting with 1 with each VLAN ID thatyou create.5. Click Save to make your changes permanent.Repeat steps 2 through 4 for each VLAN interface to create.6. To assign an IP address to the new logical VLAN interface, click the link for the logicalinterface in the Interface field of the Logical Interfaces table. Enter the IP address in theNew IP address text box. Enter the mask length in the New mask length text box.7. Click Apply.8. Click Save to make your changes permanent.The new logical interface appears as active on the interface configuration page. Click Up toview that page.(Optional) To disable the interface, click off in the Active field in the row for the logicalinterface.Nokia Network Voyager Reference Guide for IPSO 6.0 39