Uplink a L3 switch with multi vlans to 700H via SFP.

jef

Zywall 700H on the zywall.
Port "p10" configured as interface type "Ethernet" as LAN with dhcp server. Lan 10
Port "p4" configured as interface type "Ethernet" as LAN on a different LAN also with dhcp. Lan 12

The L3 switch.
Has vlans with ports hosting vlan10 and other ports vlan12, the switch has SFP tagged for both the vlans which is connect to the SPF on the zywall.

My question: SFP to SFP. L3 switch to zywall.
How do I get the zywall to route both lans over the SFP port?
And can I keep the p4 and p10 as rj45 lan port?

How do I get the zywall to allow p4, p10 and p13 to be members of p13 the SFP uplink?

Do I have to change the zywall from "interface type" of ethernet, to vlan?

Zywall P4, and P10, were connected via RJ45 cables (plural) to a port configured "Port based vlan" one RJ45 to each port grouping on the switch.

I would like that traffic to SFP to the Zywall. One fiber, get rid of 2 rj45 cables.

jef

Thanks, not the answer I was hoping for but still very much appreciated.
Could this be resolved in future firmware? Because that is a problem, vlans are about grouping ports.

Zyxel_Judy

Hi @jef ,

In the next firmware version 1.35, USG FLEX H supports LAG over VLAN.

Step 1. Create a LAG interface "lag0" and add members P13 and P14.

Step 2. Create a VLAN interface and select LAG interface "lag0" as the member.   

Scheduled release time: in the end of July. 

To learn about enhancements, new features, and release dates, please follow the Firewall news & release.

jef

I created 2 zywall vlans, bound them both to the same sfp port, but how would I associated another port, p4 copper with the sfp vlan? I can not add members to the sfp p14, zywall only allows 1 selection?

PeterUK

You might not be able to?

If P4 is config with one subnet and P10 is on another subnet you can't join them you can have P10 to interface P4 but you will not have the subnet P10 did have.

So if you can have P4, P10 and SFP which I'm not sure if you can mix SFP with rj45 then you have one Ethernet for that given interface but you can add many VLAN to them ports

jef

Thanks, I still haven't solved this. But I do not think RJ45 ports can "member" with SFP ports.

PeterUK

I'm not too sure what you want to do you say "I would like that traffic to SFP to the Zywall. One fiber, get rid of 2 rj45 cables." yet you have setup P4 and P10 so if you just want everything to SFP setup as Ethernet log in and remove P4 and P10 then setup VLAN on SFP

jef

I was using P10 for vlan 10 and P4 for vlan 12. Both of these are zywall RJ45 ports.
Needed POE+, so I added in a smart switch, set the new switch up with vlans 10 and 12.
Wanted to uplink the Switch 10G over SFP to the SFP P14 on the zywall.
Thought I could keep P10 and P4 doing what they have always done (vlan 10 and vlan 12) and have P14(SFP) linked to a SFP on a smart switch.
Not sure how to keep P10 and P4 and add P14 all as Tagged ports as part of multi-vlans.

jef

I think the answer is: I can not have RJ45 and SFP ports configured together.
If I uplink with SFP, I can not have a similar vlan or lan on a RJ45 port.

Is that true? Or am I missing something a way to configure ports?

Zyxel_Judy

Hi @jef ,

We are reviewing the information you provided; however, some details remain unclear. To better assist you, could you please draw a network topology diagram that includes:

• Your USG FLEX 700H, the smart switch, and any other connected devices
  
• Port connections between devices, VLAN assignments for each port

Additionally, please provide a clear description of your network's intended purpose and functionality. With this information, we'll be able to recommend the most suitable configuration for your setup.

jef

It is simple. 700H and 2 Smart switches one had POE.
RJ45 ports on the zywall connected to the smart switch serving a vLans.
SPF port of the zywall connected to the POE switch, hosting the same vlans.

I just could not "member" the cat ports and sfp ports. If they are all trunks, it should work.

Zyxel_Judy

Hi @jef ,

We need to confirm some details with you before providing our recommendation. Based on your topology and the information "RJ45 One Per VLAN," we assume your setup looks like the diagram below, and you want to configure:

• VLAN 1, VLAN 2, VLAN 3... VLAN 12 for USG FLEX 700H port 1, port 2, ports 3 ... port 12
• VLANs 10, 11, 12 for the two SFP+ ports (ports 13 and 14)

Please confirm: Is the above configuration as you expect? If not: Please correct our understanding and provide the detailed configuration you need.

jef

Prior to failing to get RJ45 port to be a member with any SPF port.

p3 vLan10
p4 vLan11
p5 vLan12

I wanted p3,p4,p5 and p14 to be members.

p3 to L3 Switch a vLan10 tagged
p4 to L3 Switch a vLan11 tagged
p5 to L3 Switch a vLan12 tagged

p14 (spf) to PoE L3 Switch as a member to vLans 10,11,12
Connected to spf on a PoE switch tagged, which had all 3 vlans on it different port groups for different vlans.

the SPF on the PoE L3 Switch can be part of vLan10,11,12 as a Uplink.