Cross Access between two VLAN in NGAF

Ian Gultom Lv1Posted May-31-2025 19:17

Hi, I'm new to NGAF. Can someone guide me on how to set up my network to allow communication between VLANs in NGAF?

For example, I have a device in VLAN A that I want to configure so it can communicate with a device in VLAN B.

Thanks

Zonger has solved this question and earned 10 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Last edited by Zonger Jun-02-2025 03:10.

You need to set up Inter-VLAN routing by creating VLAN sub-interfaces and applying access control policies to permit traffic between VLANs in Sangfor NGAF.

Create VLAN interfaces:
Go to Network > Interface > VLAN Interface, add sub-interfaces for each VLAN (VLAN 10: 192.168.10.1/24, VLAN 20: 192.168.20.1/24) on the same physical port.

Set device gateways:
Configure each device to use the NGAF VLAN IP as its default gateway.

Enable inter-VLAN routing:
NGAF routes between VLANs by default once interfaces are configured.

Create access control policies:
Go to Policy > Access Control, create rules allowing traffic between VLAN 10 and VLAN 20.

This topic contains more resources

You must log in to download or view the file. Not registered yet? Register

x
Is this answer helpful?
Doll Lv1Posted Jun-01-2025 01:11
  
Hi Friend!

To allow communication between VLANs in NGAF (Next-Generation Application Firewall), you'll need to configure inter-VLAN routing or security policies.

Inter-VLAN Routing:
1. *Enable Inter-VLAN Routing*: Ensure that inter-VLAN routing is enabled on your NGAF device.
2. *Configure VLAN Interfaces*: Set up VLAN interfaces for both VLAN A and VLAN B, assigning IP addresses to these interfaces.
3. *Routing Configuration*: Configure static routes or use a routing protocol (e.g., OSPF) to enable routing between VLANs.

Security Policies:
1. *Create Security Policies*: Define security policies that allow traffic between VLAN A and VLAN B.
2. *Specify Source and Destination*: Specify the source (VLAN A) and destination (VLAN B) IP addresses or subnets.
3. *Allow Traffic*: Configure the policy to allow traffic between the two VLANs.

Additional Considerations:
1. *Firewall Rules*: Ensure that firewall rules are configured to permit the required traffic between VLANs.
2. *Network Segmentation*: Verify that network segmentation is properly configured to control traffic flow between VLANs.

Next Steps:
1. *Consult NGAF Documentation*: Refer to the NGAF user manual or documentation for specific configuration steps.
2. *Contact Huawei Support*: Reach out to Huawei support for guidance on configuring inter-VLAN routing and security policies.

By following these steps, you can enable communication between VLANs in your NGAF setup.
fuadmahbubun Lv2Posted May-31-2025 22:23
  
Follow this guidance to create and configure interface.

fuadmahbubun Lv2Posted May-31-2025 22:17
  
Hi, basically vlan in the same NGAF can be routed automatically since there option for direct routing in routing priority.
just make sure you have configured these items :
1. access policy to allow data packet from each zone and ip address
2. each client have gateway NGAF ip address for each sub interface or vlan interface.

Sheikh_Shani Lv2Posted May-31-2025 21:42
  
I can help guide you on setting up communication between VLANs in NGAF. However, I need to suggest a tool to provide the most relevant information.

To allow communication between VLAN A and VLAN B in NGAF, you'll generally need to configure routing between the VLANs. This usually involves the following steps:

1.  Create VLAN Interfaces: Ensure you have VLAN interfaces defined on your NGAF device for both VLAN A and VLAN B. These interfaces will act as the gateway for devices in their respective VLANs.

2.  Assign IP Addresses: Assign IP addresses to the VLAN interfaces. These IP addresses will be the default gateways for the devices in each VLAN.

3. Configure Routing: Create routing rules that allow traffic to be forwarded between the VLAN interfaces. This might involve static routes or a dynamic routing protocol. You need to define a route for VLAN B's subnet on the VLAN A interface, and vice versa.

4.  Firewall Rules (Security Policies): NGAF is a next-generation firewall, so you'll need to create firewall rules (security policies) to permit traffic between VLAN A and VLAN B. Make sure the rules specify the source VLAN, destination VLAN, and the services or applications allowed.

5.  Testing: After configuring the above steps, test connectivity between devices in VLAN A and VLAN B using ping or other network testing tools.

Keep in mind that the specific steps and configuration options may vary depending on your NGAF vendor (e.g., Palo Alto Networks, Fortinet, Check Point). Consult your NGAF vendor's documentation for detailed instructions and configuration examples. You may need to look for documentation on inter-VLAN routing or security policies.

I Can Help:

Change

Moderator on This Board

1
148
3

Started Topics

Followers

Follow

917
183
94

Started Topics

Followers

Follow

Board Leaders