Dell sonicwall x series, Deployment Manual, Page: 22 / 45

Dell SonicWALL X-Series Solution Deployment Guide
Configuring the X-Series Solution in various topologies
22
Configuring the different topologies
Topics:
• Configuring a common uplink on page 22
• Configuring a dedicated uplink on page 25
• Configuring a hybrid system with common and dedicated uplink(s) on page 31
• Configuring isolated links for management and data uplinks on page 32
• Configuring HA and PortShield with dedicated uplink(s) on page 35
• Configuring VLAN(s) with dedicated uplink(s) on page 37
• Configuring a dedicated link for SonicPoint access on page 42
Configuring a common uplink
This configuration allows a single link between the firewall and the X-Series switch to be designated as the
uplink that carries all PortShield traffic. Both the firewall and switch ports are configured as trunk ports for
carrying tagged traffic for VLANs corresponding to all the firewall interfaces. The VLAN tag of the traffic is used
to associate the traffic to the PortShield group to which it belongs.
Figure 1 shows a typical integration topology of a TZ500 firewall with an X1026P switch:
• The firewall uplink interface is X3.
• The X-Series switch uplink interface is 2.
This uplink between X3 on the firewall and port 2 on the extended switch is an common link set up to carry
PortShield traffic between H1 and H3 and H2 and H4. The uplink is also the one on which the X-Series switch is
managed by the firewall. In such a configuration, X3 is configured in the same subnet as the IP of the X-Series
switch. Also, X3 is configured as the firewall uplink, and port 2 is configured as the switch management as well
as the switch uplink when a switch is provisioned.
Figure 1. Common uplink topology
NOTE: For a complete description of creating PortShield groups, see the SonicOS 6.2 Administration Guide
and Adding the X-Series switch to SonicOS on page 17 . The following sections describe only those steps
required for the various topologies.
NOTE: If necessary, you may choose to have different links carry the PortShield traffic and management
traffic. For more information, see Configuring isolated links for management and data uplinks on page 32 .