NETGEAR UTM10 - ProSecure Unified Threat Management... Montage- und Bedienungsanleitung

Version 2.0

UTM (Unified Threat Management) in a multi-SSID multi-VLAN network with

traffic separation

This document describes the steps to undertake in configuring a UTM 10 (Firmware version

1.0.16-0) and a WNDAP330 (Firmware version 3.0.3) to host a multi-SSID and multi-VLAN

network.

The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs

configured, from any other VLAN which will exist on the Wired or Wireless LAN –maintaining

same VLAN communication.

The diagram below shows a typical scenario.

AP configuration (WNDAP330)

LAN IP

192.168.1.235

Untagged VLAN: 1 –Management VLAN: 1

SSID Corporate –VLAN 1(ID 1)

SSID Guest –VLAN 20 (ID 20)

SSID Engineering –VLAN30 (ID 30)

Corporate Guest Engineering

UTM Port 1 to AP LAN

UTM 10 Configuration

LAN IP

192.168.1.1

VLAN1 (Corporate - default)

IP 192.168.1.1

Membership: Port 1, 2, 3, 4

DHCP enabled 192.168.1.x/24

VLAN20 (Guest1)

IP 192.168.20.1

Membership: Port 1

DHCP enabled 192.168.20.x/24

VLAN30 (Engineering)

IP 192.168.30.1

Membership: Port 1

DHCP enabled 192.168.30.x/24

UTM Port 2 to Switch 0/1

Internet

Wired LAN 192.168.1.x/24

Layer 2/ Layer 3 switch configuration

LAN IP

192.168.1.239

Management VLAN: 1

Membership : all ports Untagged in

VLAN1

Version 2.0

Table of Contents

Network Setup.................................................................................................................. 3

Physical setup............................................................................................................... 3

Logical setup................................................................................................................. 3

UTM10 Configuration ...................................................................................................... 4

Create a new VLAN..................................................................................................... 4

AP configuration (WNDAP330)...................................................................................... 5

Create a new SSID...................................................................................................... 5

Further Notes.................................................................................................................... 6

Testing ........................................................................................................................... 6

Managing devices........................................................................................................ 6

Version 2.0

Network Setup

Physical setup

Layer 2/Layer 3 switch Port 0/1 connected to UTM10 Port 2

Wireless AP LAN port connected to UTM10 Port 1

UTM10 WAN port connected to the Internet

Logical setup

UTM 10 Configuration

LAN IP

192.168.1.1

VLAN1 (default)

IP 192.168.1.1

Membership: Port 1, 2, 3, 4

DHCP enabled 192.168.1.x/24

VLAN20

IP 192.168.20.1

Membership: Port 1

DHCP enabled 192.168.20.x/24

VLAN30

IP 192.168.30.1

Membership: Port 1

DHCP enabled 192.168.30.x/24

AP configuration

LAN IP

192.168.1.235

Untagged VLAN: 1 –Management VLAN: 1

SSID Corporate –VLAN 1(ID 1)

SSID Guest –VLAN 20 (ID 20)

SSID Engineering –VLAN30 (ID 30)

Layer 2/ Layer 3 switch configuration

LAN IP

192.168.1.239

Management VLAN: 1

Membership: all ports Untagged in VLAN1

Version 2.0

UTM10 Configuration

Create a new VLAN

Access the VLAN configuration via

Network Config, LAN settings, LAN

Setup. VLAN1 exists on the default

configuration and all the ports are

members of it.

Change VLAN1 Profile name to

Corporate by simply editing the VLAN

profile.

Click on Add… to create a new VLAN

Repeat the same process for both VLAN

20 and VLAN 30 (for administration

purposes each will have the profile name

matching the respective SSID).

Port 1 will be the only port member of

each of the new VLANs as this is the port

the Access Point will connect to.

(If required enable DHCP with a scope of

addresses within the same range as the

VLAN IP address).

Click on Apply.

After creating each VLAN the User will be

prompted with the VLAN Profiles

summary

NOTE: Although not relevant in this scenario, attention

should be dedicated to the Default VLAN concept.

Changing the Default VLAN for a Port will be equivalent to

changing the PVID of the port on for example a Netgear

switch 802.1q capable.

A port member of multiple VLANs will be instead be the

equivalent of setting an 802.1q trunk port, as long as the

default VLAN is VLAN 1.

Version 2.0

AP configuration (WNDAP330)

Create a new SSID

Access the AP configuration via Security,

Profile settings (by default all only the

SSID Netgear is active, whilst all the

SSIDs are assigned to VLAN 1

In the bottom of the page click on Edit to

modify the Netgear profile name and

SSID to Corporate –note how this will

reflect the settings performed on the UTM

relating to the VLAN 1 profile

Apply the changes

Enable both Profile numbers 2 and 3 to

activate the respective SSID.

Perform the relevant changes to assign

one profile to VLAN 20 and one to VLAN

30 also reflecting the same profiles and

SSID names

NOTE: The security level on each profile will depend on

the Security policy in use in the network

Version 2.0

Further Notes

Testing

Testing can be performed by connecting a Wireless client to each of the SSID alternatively (i.e.

Corporate, Guest, Engineering) and trying to access the Internet or ping the IP address assigned

to the UTM in the VLAN associated to the SSID.

Ensure the Wireless client obtains an IP address from a DHCP server or hard-code an IP address

relevant to the VLAN the Wireless client will be connecting to.

Inter-VLAN routing will work between VLANs if the following option is enabled in both the source

and destination VLAN:

Managing devices

UTM The unit will be managed using the IP address configured on the VLAN the

managing device will try to connect from.

The unit will therefore be accessible using 192.168.1.1 in VLAN1, 192.168.20.1 in

VLAN 20 and 192.168.30.1 in VLAN 30.

WNDAP330

The unit will be managed, upon being configured, from a device (wired or wireless)

connected to a port in VLAN1 ,as VLAN 1 is the management VLAN for the Access

Point (IP 192.168.1.235)

Layer2/Layer3 switch

The unit will be managed connecting to a port in VLAN1, as this is the management

VLAN for the switch (192.168.1.239)

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere NETGEAR Netzwerk-Hardware Handbücher

NETGEAR

NETGEAR ReadyDATA 5200 Bedienungsanleitung

NETGEAR

NETGEAR Stora Bedienungsanleitung

NETGEAR

NETGEAR RNRX4410 - ReadyNAS 2100 NAS Server Bedienungsanleitung

NETGEAR

NETGEAR AXM752 - ProSafe XFP Transceiver Module Bedienungsanleitung

NETGEAR

NETGEAR AF711F Bedienungsanleitung

NETGEAR

NETGEAR STM150 - ProSecure Web And Email Threat Management... Bedienungsanleitung

NETGEAR

NETGEAR RND2175 - ReadyNAS Duo NAS Server Bedienungsanleitung

NETGEAR

NETGEAR UTM5 - ProSecure Unified Threat Management... Bedienungsanleitung

NETGEAR

NETGEAR STM150 - ProSecure Web And Email Threat Management... Bedienungsanleitung

NETGEAR

NETGEAR Orbi NBR750 Bedienungsanleitung

NETGEAR

NETGEAR ProSafe ANT2409 Bedienungsanleitung

NETGEAR

NETGEAR XAVBI 301 Bedienungsanleitung

NETGEAR

NETGEAR UTM25-100NAS - Prosecure Utm Appliance 25U No Sub... Bedienungsanleitung

NETGEAR

NETGEAR ProSecure UTM25S Bedienungsanleitung

NETGEAR

NETGEAR M5300 Series Bedienungsanleitung

NETGEAR

NETGEAR RN12P0610 - ReadyNAS 3200 Montageanleitung

NETGEAR

NETGEAR PLP1200 Bedienungsanleitung

NETGEAR

NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN... Bedienungsanleitung

NETGEAR

NETGEAR AX742 - ProSafe 24 Gigabit Stacking Bedienungsanleitung

NETGEAR

NETGEAR UTM5EW-100NAS Bedienungsanleitung

NETGEAR

NETGEAR ReadyNAS Duo Bedienungsanleitung

NETGEAR

NETGEAR ANT24BDC - Power Injector For The 500 mW... Bedienungsanleitung

NETGEAR

NETGEAR RND4000 - ReadyNAS NV+ NAS Server Benutzerhandbuch

NETGEAR

NETGEAR WN1000RP Bedienungsanleitung

Beliebte Netzwerk-Hardware Handbücher anderer Marken

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Bedienungsanleitung

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Bedienungsanleitung

Yudor

Yudor YDS-16 Bedienungsanleitung

D-Link

D-Link ShareCenter DNS-320L Bedienungsanleitung

Samsung

Samsung ES1642dc Gebrauchsanweisung

Honeywell Home

Honeywell Home LTEM-PV Montageanleitung

evertz

evertz 7700 Series Bedienungsanleitung

D-Link

D-Link ShareCenter DNS-343 Bedienungsanleitung

Asante

Asante AsanteBridge 1012 Bedienungsanleitung

FireBrick

FireBrick FB2700 Bedienungsanleitung

Audiovox Electronics

Audiovox Electronics ARWH2T Bedienungsanleitung

ADC

ADC DSX-1 Handbuch

NetComm

NetComm NF2 Bedienungsanleitung

Alcatel-Lucent

Alcatel-Lucent 5620 Bedienungsanleitung

Dell EMC

Dell EMC XC6420 Series Bedienungsanleitung

Lanner

Lanner NCA-1020A Bedienungsanleitung

Allied Telesis

Allied Telesis AT-TN121-A Bedienungsanleitung

Arista

Arista CCA-ETM-Q12 Bedienungsanleitung