InterVLAN Routing in Sangfor

Newbie380371 Lv1Posted Aug-30-2019 17:01

Hello guys!

How do you implement InterVLAN routing on Sangfor?

If you can do some step-by-step configuration, I would really appreciate it.

Thanks!

Zonger has solved this question and earned 10 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Please find below the step by step configuration.

1. Create VLAN Interfaces

Navigate to:
Network > Interface > VLAN Interface

For each VLAN configure:

Parent physical interface (e.g. eth1)

VLAN ID (e.g. 10, 20)

IP Address (e.g. 192.168.10.1/24, 192.168.20.1/24)

Repeat for each VLAN.

2. Enable Routing Between VLANs

By default NGAF supports InterVLAN routing once VLAN interfaces are created.

No need to enable RIP or OSPF unless dynamic routing is required.

3. Configure Firewall Policies

Go to:
Policy > Access Control Policy

Add policies to allow traffic between VLAN subnets e.g.

Source: 192.168.10.0/24

Destination: 192.168.20.0/24

Action: Allow

Repeat for reverse direction or use Any if bidirectional traffic is allowed.

4. Assign VLANs to Switch Ports

If using managed switches:

Assign Access Ports to appropriate VLANs.

Configure Trunk Ports to carry multiple VLANs to the NGAF.

5. Verify Routing

Ping between VLAN subnets from connected devices.

Use NGAF's Diagnostics > Ping tool for testing.
Is this answer helpful?
yakubi Lv3Posted Sep-02-2019 12:58
  
Hi. What product?
ITD_Mitch Lv3Posted Sep-12-2019 15:33
  
There are 2 ways..

1. If the VLAN is routed in Core Switch, you can just add static route for all your VLAN's subnet to Core Switch Default VLAN.

2. If you want to route the VLAN to Sangfor NGAF, just go to Network> Interfaces> Sub-Interface. then input all the details needed.

Thanks!
Erickson Santos Lv1Posted Oct-14-2019 15:35
  
There are 2 ways that I know also.

1. Using Layer 3 (Route) Interface. Create mutiple sub-interfaces under 1 LAN layer 3 interface and assign corresponding VLAN number.

2. Using Layer 2 (Bridge) Interface. Create layer 2 (bridge) interface and set the link type to TRUNK and set the allowed VLAN (e.g. vlan 2-10). Then create VLAN interfaces, set ip addresses and vlan number.

Using these two options, there will be no routing needed as the VLANs will be directly connected to each other.
Hein Soe Lv1Posted Jan-08-2020 14:28
  

I created 8 VLAN at Sangfor NGAF. some of the department VLAN can ping each others and some of them can't ping another Department VLAN. Normally at Sangfor NGAF created VLAN can ping each other.

How to configure at Sangfor NGAF

This topic contains more resources

You must log in to download or view the file. Not registered yet? Register

x
Suwat Prayprun Lv2Posted Jan-08-2020 16:19
  
Zonger Posted May-15-2025 06:01
  
Please find below the step by step configuration.

1. Create VLAN Interfaces

Navigate to:
Network > Interface > VLAN Interface

For each VLAN configure:

Parent physical interface (e.g. eth1)

VLAN ID (e.g. 10, 20)

IP Address (e.g. 192.168.10.1/24, 192.168.20.1/24)

Repeat for each VLAN.

2. Enable Routing Between VLANs

By default NGAF supports InterVLAN routing once VLAN interfaces are created.

No need to enable RIP or OSPF unless dynamic routing is required.

3. Configure Firewall Policies

Go to:
Policy > Access Control Policy

Add policies to allow traffic between VLAN subnets e.g.

Source: 192.168.10.0/24

Destination: 192.168.20.0/24

Action: Allow

Repeat for reverse direction or use Any if bidirectional traffic is allowed.

4. Assign VLANs to Switch Ports

If using managed switches:

Assign Access Ports to appropriate VLANs.

Configure Trunk Ports to carry multiple VLANs to the NGAF.

5. Verify Routing

Ping between VLAN subnets from connected devices.

Use NGAF's Diagnostics > Ping tool for testing.

I Can Help:

Change

Moderator on This Board

4
2
0

Started Topics

Followers

Follow

134
72
23

Started Topics

Followers

Follow

43
2
2

Started Topics

Followers

Follow

1
6
6

Started Topics

Followers

Follow

1
143
3

Started Topics

Followers

Follow

Board Leaders