Switch Administration Guide

Table of Contents

Configuring Access and Trunks using Standalone access

A trunk port is a specific type of network switch that allows data to flow across a network node for multiple virtual local area networks (VLANs). It can pass numerous VLANs and VLAN traffic through it. Usually, a switch's uplink port is configured as a trunk. Trunk ports are also used to extend a network, connecting VLANs with the same VLAN ID that is configured on multiple switches. These may also be referred to as a tagged port.

An access port is a switch port dedicated to a specific network. It transports traffic to and from only the specified VLAN allotted to it. Unlike a trunk port, it will not deliver exclusive identifying tags (802.1Q or ISL tags) because the VLAN intended for it is pre-assigned. These may also be referred to as an untagged port.

Usually, an access port has only a single VLAN set up on the interface, and it carries traffic for that VLAN. If the VLAN for an access port is not configured, the interface can carry traffic using only the default VLAN, which is usually VLAN 1 (native VLAN).

It is possible to configure Ethernet interfaces as access or trunk ports, but they cannot function simultaneously as both types of ports.

To configure Trunk and access ports on a SonicWallSwitch while using in Standalone configuration

By default, all the ports of the SonicWall Switch are a part of the Native VLAN 1. So, by default, the configurations will be that all the ports are untagged in the native VLAN.

Create a new VLAN and make a few ports part of it. Use one port as an uplink port that connects to the upstream firewall or router with new VLAN configurations and other VLAN configurations. To accomplish this, configure some ports as access ports of the new VLAN and the uplink port as the trunk port, which also passes the new VLAN traffic along with the other VLAN traffic. Consider the following example:

  1. Go to VLAN > 802.1Q.

  2. Click Add VLAN.

    1. Enter the VLAN ID, for example 2.

    2. Enter the Name. For example, Data traffic

    3. Under tagged port, enter the port number to pass traffic for multiple VLANs. For example, 48.

    4. In Untagged ports, enter the port numbers to accept traffic for only a single VLAN. For example, 1-20.

    5. Click Apply.

Ports 1-20 are part of VLAN 2, and port 48 is part of the trunk port that passes VLAN 2 traffic.

To make VLAN 2 pass to a downstream device along with other VLANs through port 30, add port 30 in the tagged ports of VLAN 2.

  1. Go to VLAN > 802.1Q.

  2. Hover over the VLAN ID, and click the edit icon to edit VLAN ID 2.

  3. Under tagged port, enter the port number 30 to pass traffic for multiple VLANs. For example, 48,30.

  4. In Untagged ports, enter the port numbers to accept traffic for only a single VLAN. For example, 1-20.

  5. Click Apply.

Port 30 also acts as a trunk port. VLAN 2 is tagged along with all the other tagged VLANs.

Many VLANs can be tagged on a single port, but only one VLAN can be untagged on a port. That means a port can be a trunk port and pass as many VLANs as it is tagged in, but it can be an access port of only a particular VLAN.