
Dell SonicWALL X-Series Solution Deployment Guide
Configuring the X-Series Solution in various topologies
22
Configuring the different topologies
Topics:
•
•
Configuring a dedicated uplink
•
Configuring a hybrid system with common and dedicated uplink(s)
•
Configuring isolated links for management and data uplinks
•
Configuring HA and PortShield with dedicated uplink(s)
•
Configuring VLAN(s) with dedicated uplink(s)
•
Configuring a dedicated link for SonicPoint access
Configuring a common uplink
This configuration allows a single link between the firewall and the X-Series switch to be designated as the
uplink that carries all PortShield traffic. Both the firewall and switch ports are configured as trunk ports for
carrying tagged traffic for VLANs corresponding to all the firewall interfaces. The VLAN tag of the traffic is used
to associate the traffic to the PortShield group to which it belongs.
shows a typical integration topology of a TZ500 firewall with an X1026P switch:
•
The firewall uplink interface is X3.
•
The X-Series switch uplink interface is 2.
This uplink between X3 on the firewall and port 2 on the extended switch is an common link set up to carry
PortShield traffic between H1 and H3 and H2 and H4. The uplink is also the one on which the X-Series switch is
managed by the firewall. In such a configuration, X3 is configured in the same subnet as the IP of the X-Series
switch. Also, X3 is configured as the firewall uplink, and port 2 is configured as the switch management as well
as the switch uplink when a switch is provisioned.
Figure 1. Common uplink topology
NOTE:
For a complete description of creating PortShield groups, see the
SonicOS 6.2 Administration Guide
and
Adding the X-Series switch to SonicOS
. The following sections describe only those steps
required for the various topologies.
NOTE:
If necessary, you may choose to have different links carry the PortShield traffic and management
traffic. For more information, see
Configuring isolated links for management and data uplinks
.