Dell SonicWALL X-Series Solution Deployment Guide
Configuring the X-Series Solution in various topologies
21
Topics:
•
About links
A common link carries data and management traffic. Common links carry all PortShield traffic and all the
PortShield groups.
A dedicated link can carry only one PortShield group, and that group must be portshielded to the dedicated port
on the TZ appliance.
An isolated link can carry management traffic OR data traffic, but not both at the same time. Isolated links
usually have separate connections between the firewall and the X-Switch for management traffic and data
traffic.
About uplink interfaces
Uplink interfaces can be viewed as “trunk” ports set up to carry tagged/untagged traffic. When an extended
switch is added with firewall uplink and X-Switch uplink options, the port on the firewall configured as the
firewall uplink and the port on the extended switch configured as the switch uplink are set up automatically to
receive/send tagged traffic for all IDV VLANs. The IDV VLAN of the tagged traffic allows the firmware to derive
the PortShield host interface for the traffic.
Criteria for configuring an uplink interface
•
The interface should be a physical interface; virtual interfaces are not allowed.
•
The interface should be a switch interface. (On some platforms, some firewall interfaces are not
connected to the switch. Such interfaces are not allowed.)
•
The interface cannot be a PortShield host (some other firewall interface cannot be portshielded to it) or
a PortShield group member (cannot be portshielded to another firewall interface).
•
The interface cannot be a bridge primary or bridge secondary interface.
•
The interface cannot have any children (it cannot be a parent interface for other child interfaces).
Connecting the X-Series switch
management port to a TZ firewall
The interface connected to the management port of the X-Switch must have an IP address from the same subnet
as the switch. For example, if the management connection between the switch and the TZ is through X2, then
X2 must have an IP address from the same subnet, such as
192.168.2.1/24
.
