Netgate XG-7100 Скачать руководство пользователя страница 17 | Manualshive

Страница: 17 / 56

background image

Product ManualXG-7100

The interface assignments should show like this now:

At this point SFP+ port

ix0

is now configured as the WAN interface. The LAN interface is still configured the same as

the default. Next, the switch will need to be updated so that ETH1 (previously WAN) acts the same as ETH2-8. This
will be done from the webGUI.

From the webGUI, pull up the Switch VLAN configuration under

Interfaces -> Switches -> VLANs

:

2.5. Switch Configuration Examples

15

«
...
15
16
17
18
19
...
»

Содержание XG-7100

Страница 1: ...Product Manual XG 7100 Netgate Sep 21 2018...

Страница 2: ...2 XG 7100 Switch Overview 4 3 Getting Started 24 4 Connecting to Console Port 35 5 Additional Resources 42 6 Warranty and Support Information 43 7 Safety and Legal 44 8 BIOS Flash Procedure 52 9 Rein...

Страница 3: ...Desktop System This Netgate appliance provides a powerful reliable cost effective solution Quick Start Guide The Quick Start Guide covers the first time connection procedures and will provide you with...

Страница 4: ...N tagging as shown in XG 7100 Switch Overview Warning There is an Intel supplied driver issue which is noted in the Intel Release Notes for the C3000 preventing 1Gbps and 10Gbps copper modules from be...

Страница 5: ...supply fan will continue to run Turning off the rocker switch on the back of the power supply will eliminate all power to the system The power button should be depressed 3 5 seconds to initiate a grac...

Страница 6: ...ces are referred to as ETH1 ETH8 In addition to those 8 ports there are also three additional ports that operate behind the scenes PORT 0 PORT 9 ix2 and PORT 10 ix3 ETH1 ETH8 are gigabit switchports P...

Страница 7: ...5 Gbps 2500 Base KX switch link to SoC CPU ix3 2 5 Gbps 2500 Base KX switch link to SoC CPU 2 2 Switch LAGG ix2 and ix3 switch uplink ports 9 and 10 are configured as a load balanced LAGG This provid...

Страница 8: ...as an independent interface For example all of these configurations are possible ETH1 8 dedicated as a LAN switch ETH1 4 configured as a switch for LAN network A and ETH5 8 configured as a switch for...

Страница 9: ...pecify whether a switchport should act as an access or trunk port it s also possible to disable 802 1q VLAN mode When this is done a third mode called Port VLAN Mode is enabled In this mode any and al...

Страница 10: ...ever reach pfSense This can be useful if you want a device other than pfSense to act as the primary uplink for those connected clients Since WAN and LAN are assigned to lagg0 4090 and lagg0 4091 if Po...

Страница 11: ...Information on switchport status and port names If 802 1q is enabled this section can also be used to specify the native VLAN ID for each port The Port VID defined will be used to tag inbound untagge...

Страница 12: ...Product ManualXG 7100 Fig 2 Information on members of the switch LAG Fig 3 802 1q enabled default Fig 4 Port VLAN Mode 2 4 Configuring the Switch 10...

Страница 13: ...Product ManualXG 7100 Fig 5 802 1q enabled default Fig 6 Port VLAN Mode 2 4 Configuring the Switch 11...

Страница 14: ...AN child interface 4090 and 4091 are enabled instead VLANs Under VLANs the default WAN and LAN VLAN can be seen Additional VLAN networks that will be used by the switch should be defined here with lag...

Страница 15: ...d as a LAN switch For this specific example I ll perform the WAN interface reassignment over console Re assigning the WAN can be done from the webGUI as well This is what the default interface assignm...

Страница 16: ...eeded for this so enter n to continue Input ix0 as the new WAN interface name Input the same default LAN interface of lagg0 4091 for the LAN interface name and press Enter to complete the interface re...

Страница 17: ...WAN interface The LAN interface is still configured the same as the default Next the switch will need to be updated so that ETH1 previously WAN acts the same as ETH2 8 This will be done from the webG...

Страница 18: ...0 now You can either select on the row containing 4090 to delete this entry or click to remove port 1 as a member For this example I simply removed VLAN 4090 from the switch with Now edit the VLAN 409...

Страница 19: ...Next update the PVID for ETH1 so that it uses VLAN 4091 rather than the old VLAN 4090 To do this click on the Ports tab and click on the 4090 Port VID to modify it Then click on Save 2 5 Switch Confi...

Страница 20: ...the 4090 row to remove this VLAN interface 2 5 2 Two LAN switches In this scenario the LAN switch from the previous example will be split into two LAN switches A new LAN network should be created in...

Страница 21: ...Product ManualXG 7100 Add enable and configure the VLAN interface under Interfaces Assignments 2 5 Switch Configuration Examples 19...

Страница 22: ...gure the switch so that ETH1 4 use the new network To do this go to Interfaces Switches VLANs and click the Add Tag button Input the VLAN tag for the new network same as the VLAN ID configured in the...

Страница 23: ...7100 Once this is done click the Save button The final result should look like this Lastly update the Port VIDs to use the new 4081 VLAN rather than 4091 on ETH1 4 and click Save 2 5 Switch Configura...

Страница 24: ...rior to hitting pfSense Devices on this VLAN may come through on ETH8 but there may also be untagged client traffic First create the management VLAN of 4000 in pfSense using the same steps in the prev...

Страница 25: ...alXG 7100 Untagged traffic on ETH8 will be assigned a VLAN ID of 4091 ETH8 and the uplinks will also accept traffic that has already been tagged with a VLAN ID of 4000 as well 2 5 Switch Configuration...

Страница 26: ...vided by the ISP might have multiple LAN ports If so they are usually numbered For the purpose of this installation please select port 1 The next step is to connect the LAN port shown in the I O Ports...

Страница 27: ...cating a problem with website security Below is a typical example in Google Chrome If this message or similar message is encountered it is safe to proceed At the login page enter the default pfSense p...

Страница 28: ...l as http 192 168 1 1 3 6 Domain If an existing DNS domain is in use within the local network such as a Microsoft Active Directory domain use that domain here This is the domain suffix assigned to DHC...

Страница 29: ...xt after filling in the fields as appropriate 3 8 Time Server Configuration 3 9 Time Server Synchronization Setting time server synchronization is quite simple We recommend using the default pfSense t...

Страница 30: ...ss of the old firewall may be entered here if it can be determined This can help avoid issues involved in switching out firewalls such as ARP caches ISPs locking to single MAC addresses etc If the MAC...

Страница 31: ...cally require a DHCP Hostname entry Unless the ISP requires the setting leave it blank 3 15 Configuring PPPoE and PPTP Interfaces Information added in these sections is assigned by the ISP Configure t...

Страница 32: ...ivate networks The following inbound address Ranges are blocked by this firewall rule 10 0 0 1 to 10 255 255 255 172 16 0 1 to 172 31 255 254 192 168 0 1 to 192 168 255 254 127 0 0 0 8 100 64 0 0 10 f...

Страница 33: ...1 0 24 IP addresses within the 172 16 0 0 12 RFC1918 private address block are the least frequently used We recommend selecting a block of addresses between 172 16 x x and 172 31 x x for least likelih...

Страница 34: ...Configurator make the selection as highlighted The Dashboard display will follow 3 21 Backing Up and Restoring At this point basic LAN and WAN interface configuration is complete Before proceeding bac...

Страница 35: ...Click Download Configuration and save a copy of the firewall configuration This configuration can be restored from the same screen by choosing the backup file under Restore configuration 3 21 Backing...

Страница 36: ...here are times when accessing the console is required Perhaps GUI console access has been locked out or the password has been lost or forgotten See also Connecting to Console Port Connect to the conso...

Страница 37: ...console through the serial interface Microsoft Windows no longer includes HyperTerminal in Versions 7 and up PuTTY is free and can be downloaded from http www chiark greenend org uk sgtatham putty do...

Страница 38: ...play as shown below For the Connection type select Serial Set Serial line to the COM Port that is displayed in Windows Device Manager COM4 for this example and the Speed to 115200 bits per second the...

Страница 39: ...e system console via this port 4 2 1 Install the Driver Install an appropriate CP210x USB to UART Bridge VCP virtual COM port driver on the workstation used to connect with the system if needed There...

Страница 40: ...the Mini B connector on the system side completely With most cables there will be a tangible click snap or similar indication when the cable is fully engaged 4 2 3 Locate the Console Port Device The a...

Страница 41: ...m Mac OS X screen ZTerm cu Windows PuTTY SecureCRT Do not use Hyperterminal FreeBSD screen cu The settings to use within the terminal program are Speed 115200 baud Data bits 8 Parity none Stop bits 1...

Страница 42: ...t to use UTF 8 for character encoding 4 2 5 Troubleshooting No Serial Output If there is no output at all check the following items Ensure the cable is correctly attached and fully inserted Ensure the...

Страница 43: ...See No Serial Output above Ensure the installed operating system is configured to activate the serial console Ensure the installed operating system is configured for the proper console e g ttyS1 in Li...

Страница 44: ...l services html for more details 5 2 Netgate Training Netgate training offers training courses for increasing your knowledge of pfSense products and services Whether you need to maintain or improve th...

Страница 45: ...T INFORMATION One year manufacturer s warranty Please contact Netgate for warranty information or view our Product Lifecycle page All Specifications subject to change without notice For support inform...

Страница 46: ...onformity Disputes Applicable Law Site Policies Modification and Severability Miscellaneous Limited Warranty 7 1 Safety Notices 1 Read follow and keep these instructions 2 Heed all warnings 3 Only use...

Страница 47: ...installation prior to connecting the equipment d Protective grounding earthing is provided by Listed AC adapter Building installation shall provide appro priate short circuit backup protection e Prot...

Страница 48: ...oder st dtischen Entsorgungsdienste oder an den H ndler bei dem Sie das Produkt erworben haben 7 7 3 Espa ol La Directiva 2002 96 CE de la UE exige que los equipos que lleven este s mbolo en el propio...

Страница 49: ...i p slu n mi ustanoven mi sm rnice 1999 5 ES 7 8 2 Dansk Danish Undertegnede NETGATE erkl rer herved at f lgende udstyr NETGATE device overholder de v sentlige krav og vrige relevante krav i direktiv...

Страница 50: ...kipun 1999 5 EC 7 8 11 Italiano Italian Con la presente NETGATE dichiara che questo NETGATE device conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999...

Страница 51: ...disposi es da Directiva 1999 5 CE 7 8 21 Rom na Romanian Prin prezenta NETGATE declara ca acest dispozitiv NETGATE este n conformitate cu cerint ele esent iale s i alte prevederi relevante ale Direct...

Страница 52: ...ts located in Austin Texas or any other court having jurisdiction over you 7 11 Site Policies Modification and Severability Please review our other policies such as our pricing policy posted on our we...

Страница 53: ...RODUCTS SERVICES INFORMA TION CONTENT MATERIALS PRODUCTS INCLUDING SOFTWARE OR OTHER SERVICES INCLUDED ON OR OTHERWISE MADE AVAILABLE TO YOU THROUGH THE PRODUCTS SERVICES RCL S OR ESF S SERVERS OR ELE...

Страница 54: ...lation is complete a message will appear saying pfSense pkg Netgate_Coreboot_Upgrade installation successfully completed 5 Now that the package is installed navigate to System Netgate Coreboot Upgrade...

Страница 55: ...appropriate console port options 6 The installer will automatically launch once the boot process completes and offer the choice of a Quick Easy Install Custom Install and several other options Select...

Страница 56: ...Product ManualXG 7100 54...

Отзывы:

Нет отзывов

Похожие инструкции для XG-7100

Бренд: Watchguard Страницы: 20

SecPath F5000-AK Series

Бренд: H3C Страницы: 39

GoSilent GSC-100

Бренд: Silent Circle Страницы: 10

Бренд: Skybox Securoty Страницы: 44

Бренд: Fortinet Страницы: 64

Бренд: Palo Alto Страницы: 14

Бренд: Watchguard Страницы: 41

Vigor2830 Series

Бренд: Draytek Страницы: 472

Бренд: Watchguard Страницы: 2

Бренд: inGate Страницы: 37

FortiManager-3000B

Бренд: Fortinet Страницы: 2

FortiManager-3000

Бренд: Fortinet Страницы: 2

FortiMail-4000A

Бренд: Fortinet Страницы: 2

Бренд: Fortinet Страницы: 2

FortiMail-3000C

Бренд: Fortinet Страницы: 2

Бренд: Fortinet Страницы: 2

Бренд: Fortinet Страницы: 2

FortiMail-2000A

Бренд: Fortinet Страницы: 2

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды