Rockwell ArmorStratix 5700 series, Instructions Manual

Page: 260 / 548

260 Rockwell Automation Publication 1783-UM007F-EN-P - September 2016
Chapter 7 Configure Switch Features
VLAN Assignments
When configuring NAT, you can assign one or more VLANs to a NAT
instance. When you assign a VLAN to a NAT instance, the traffic that is
associated with that VLAN is subject to the configuration parameters of the
NAT instance. Configuration parameters include whether traffic is translated,
fixed up, blocked, or passed through.
When assigning VLANs to a NAT instance, consider the following:
• NAT supports both trunk ports and access ports.
• NAT does not change VLAN tags.
• You can assign a maximum of 128 VLANs to one or more instances.
• You can assign the same VLAN to multiple instances as long as the
VLAN is associated with different ports. For example, you can assign
VLAN 1 to both instance A and instance B. However, VLAN 1 must be
associated with port Gi1/1 on instance A and port Gi1/2 on instance B.
• By default, each instance is assigned to all VLANs on port Gi1/1 and no
instances on port Gi1/2.
VLANs associated with a trunk port can or cannot be assigned to a NAT
instance:
• If a VLAN is assigned to a NAT instance, its traffic is subject to the
configuration parameters of the NAT instance.
• If a VLAN is unassigned to a NAT instance, its traffic remains
untranslated and is always permitted to pass through the trunk port.
IMPORTANT Changes to the native VLAN on a port assigned to a NAT instance can break
existing NAT configurations. If you change the VLAN assigned to a port
associated with a NAT instance, you must reassign VLANs to that NAT
instance.
Make sure all VLANs and Smartport roles are configured prior to NAT
configuration.