How to implement inter-VLAN on Sangfor model m4500-f-I

Hi Sangfor community,

How do you implement InterVLAN routing on Sangfor? If you can do some step-by-step configuration, I would really appreciate it.

Thanks!

Step No.1
Network--->Subinterfaces
click on Add button:
physical interfaces: Local LAN (Trusted)
VLan ID: Define Vlan Number Eg. 36
Description: Define Name
Zone: Trusted

Network: Static option Selected
        IP pool Define
Management Services
Allow: Check on WEBUI and PING

Here is a step-by-step guide on how to implement InterVLAN routing on Sangfor:

First, you need to configure the VLANs that you want to use. Go to the VLAN configuration page in the Sangfor management interface and create the VLANs that you need. For example, you might create VLAN 10 for the finance department and VLAN 20 for the marketing department.

Next, you need to configure the VLAN interfaces. Go to the interface configuration page and create a new interface for each VLAN that you created in the previous step. For example, you might create Interface 1 for VLAN 10 and Interface 2 for VLAN 20.

Assign IP addresses to each interface that you created. For example, you might assign IP address 10.0.1.1 to Interface 1 and IP address 10.0.2.1 to Interface 2.

Now you need to configure the routing between the VLANs. Go to the routing configuration page and add a new static route for each VLAN. For example, for VLAN 10 you might add a route for the 10.0.2.0/24 network with a next hop of 10.0.1.2 (the IP address of the router interface that connects to VLAN 20). Similarly, for VLAN 20 you might add a route for the 10.0.1.0/24 network with a next hop of 10.0.2.2 (the IP address of the router interface that connects to VLAN 10).

Finally, you need to configure the router interfaces that connect to each VLAN. Go to the router interface configuration page and configure each interface with an IP address that is in the same subnet as the VLAN interface that it connects to. For example, if Interface 1 has IP address 10.0.1.1, then the router interface that connects to Interface 1 should have an IP address in the 10.0.1.0/24 subnet.

With these configurations in place, hosts on each VLAN should be able to communicate with each other through the router, and you should have InterVLAN routing set up on your Sangfor device.

There are 2 ways that I know also.

1. Using Layer 3 (Route) Interface. Create mutiple sub-interfaces under 1 LAN layer 3 interface and assign corresponding VLAN number.

2. Using Layer 2 (Bridge) Interface. Create layer 2 (bridge) interface and set the link type to TRUNK and set the allowed VLAN (e.g. vlan 2-10). Then create VLAN interfaces, set ip addresses and vlan number.

You can check this below link for the documentation of it.

Sangfor VLAN

To implement InterVLAN routing on Sangfor devices, you can follow these step-by-step configurations:

Access Sangfor Device Management Interface: Log in to the Sangfor device management interface using the appropriate credentials.

Create VLANs: Configure the VLANs you want to use for InterVLAN routing. This typically involves specifying the VLAN IDs, VLAN names, and associated subnets for each VLAN. Ensure that the VLANs you create are distinct and do not overlap.

Configure VLAN Interfaces: Assign IP addresses to the VLAN interfaces to enable routing between the VLANs. Each VLAN will have its own virtual interface with an IP address within its respective subnet.

Enable InterVLAN Routing: Enable InterVLAN routing on the Sangfor device. This setting allows traffic to flow between the different VLANs.

Configure Routing Protocols (Optional): If you want to use dynamic routing protocols, such as OSPF or RIP, configure the desired routing protocol on the Sangfor device. This step is optional and can be skipped if you prefer to use static routes.

Add Static Routes (If not using dynamic routing): If you are not using dynamic routing protocols, configure static routes on the Sangfor device. Add routes to each VLAN subnet so that the device knows how to reach the different VLANs.

Configure VLAN Access Control (Optional): If you want to implement access control between VLANs, configure VLAN access control rules on the Sangfor device. These rules allow you to control which traffic is permitted or denied between VLANs.

Test InterVLAN Connectivity: Once the configuration is complete, test the InterVLAN connectivity. Try pinging devices in different VLANs to verify that the traffic is correctly routed between them.

It's important to note that the specific steps and options available may vary depending on the model and firmware version of your Sangfor device. Refer to the documentation or contact Sangfor support for detailed instructions tailored to your specific device.

Additionally, make sure to carefully plan your network design, including subnet addressing, VLAN assignments, and routing requirements, to ensure a smooth implementation of InterVLAN routing on Sangfor devices.

hi. please provide a simple network topology with IP assignment of your site, and what are u trying to achieve,

To implement InterVLAN routing on Sangfor, you need to create VLANs, configure IP addresses on VLAN interfaces, and then create static routes or enable a routing protocol such as OSPF or BGP. Additionally, you may need to configure firewall policies to allow traffic between the VLANs.

Hi,

If you want to route the VLAN to Sangfor NGAF, just go to Network> Interfaces> Sub-Interface. then input all the details needed.

Thanks

The first step in configuring VLANs is to give each one a unique VLAN ID and assign the appropriate ports to that VLAN. To enable traffic routing between VLANs, activate IP routing on the device next. Then, assign IP addresses to each VLAN's ports on the VLAN network. To guarantee correct routing between VLANs, add static routes or dynamic routing protocols. Finally, if necessary, set firewall rules or access control lists (ACLs) to regulate and filter traffic between VLANs. For effective deployment, check the settings and test inter-VLAN communication.