Zyxel xs3800-28 vlan routing
My organizations is planning to use 2 Zyxel xs3800-28 in stacking mode as core switches in LAN soon.
The LAN project provides creating:
1) I need to route traffic from Vlan 10 to Vlan 20, and from Vlan 20 to Vlan 10;
3) Traffic from Vlan 30 to 10, 20 must be blocked, excluding a single source IP from Vlan 30 (192.168.30.200/24).
Will I be able to solve this using these switches and can you share an approximate configuration for this?
Best Answers
-
Welcome to the Zyxel community!
The below suggest configuration is based on the 4.80(ABML.1)C0 version.
For the first question, you could reference our Handbook page 43 to set up the inter-VLAN routing.
For the second and the third question, you could use the ACL to fulfill your requirement.
Here's the setup suggestion:
- Please search ACL to enter Classifier > Classifier Global Setting. Change the “match order” to Manual.
- Please go to Classifier > Classifier Setup to add classifiers.
- Add classifier “VLAN 10 to VLAN 30 specific IP” with the source IP with VLAN 10 subnet and the destination IP with VLAN 30 specific IP address. And no need to change the weight.
- Add classifier “VLAN 30 specific IP to VLAN 10” with the source IP with VLAN 30 specific IP address and the destination IP with VLAN 10 subnet. And no need to change the weight.
- Add classifier “VLAN 30 deny all to VLAN 10” with the source IP with VLAN 30 subnet and the destination IP with VLAN 10 subnet. The weight should be changed to a lower weight, I use 3276 for example.
- Same setting for VLAN 20 to VLAN 30.
- Please go to ACL > Policy Rule to add the policy rules.
- Add a policy rule for the classifier “VLAN 10 to VLAN 30 specific IP”. All actions do not need to change.
- Add a policy rule for the classifier “VLAN 30 specific IP to VLAN 10”. All actions do not need to change.
- Add a policy rule for the classifier “VLAN 30 deny all to VLAN 10”. The Forwarding action should be changed to Discard the packet.
If there's any question, please feel free to ask.
Hope it helps.
1 -
Hi @Smartqwerty,
Here's the CLI Reference Guide.
By the way, here's the download library page of XS3800. You could also find the CLI Reference Guide and the firmware here.
0
All Replies
-
Welcome to the Zyxel community!
The below suggest configuration is based on the 4.80(ABML.1)C0 version.
For the first question, you could reference our Handbook page 43 to set up the inter-VLAN routing.
For the second and the third question, you could use the ACL to fulfill your requirement.
Here's the setup suggestion:
- Please search ACL to enter Classifier > Classifier Global Setting. Change the “match order” to Manual.
- Please go to Classifier > Classifier Setup to add classifiers.
- Add classifier “VLAN 10 to VLAN 30 specific IP” with the source IP with VLAN 10 subnet and the destination IP with VLAN 30 specific IP address. And no need to change the weight.
- Add classifier “VLAN 30 specific IP to VLAN 10” with the source IP with VLAN 30 specific IP address and the destination IP with VLAN 10 subnet. And no need to change the weight.
- Add classifier “VLAN 30 deny all to VLAN 10” with the source IP with VLAN 30 subnet and the destination IP with VLAN 10 subnet. The weight should be changed to a lower weight, I use 3276 for example.
- Same setting for VLAN 20 to VLAN 30.
- Please go to ACL > Policy Rule to add the policy rules.
- Add a policy rule for the classifier “VLAN 10 to VLAN 30 specific IP”. All actions do not need to change.
- Add a policy rule for the classifier “VLAN 30 specific IP to VLAN 10”. All actions do not need to change.
- Add a policy rule for the classifier “VLAN 30 deny all to VLAN 10”. The Forwarding action should be changed to Discard the packet.
If there's any question, please feel free to ask.
Hope it helps.
1 -
Good afternoon!
Your answer was very helpful, thank you!
Based on the
handbook, we don't have to write static routes, it looks like a
full-fledged level 3 switch!I didn't find the cli reference for this
switch in the downloads library, could you give a link to the download cli reference or maybe full documentation pack?
Thank you!0 -
Hi @Smartqwerty,
Here's the CLI Reference Guide.
By the way, here's the download library page of XS3800. You could also find the CLI Reference Guide and the firmware here.
0
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 89 Nebula Status and Incidents
- 5.4K Security
- 169 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight