• To configure a "Port Based VLAN":

  Note: This term is used on Edge / Safe@Office device to virtually distinguish between the physical LAN ports that are connected to the same LAN Switch.

  Edit the desired physical port, assign it to a "separated network" and enter the required subnet.

  Example:

  
  
  

• To configure a "Tag Based VLAN":

  1. Go to Device tab - click on Local Network.
     
     

  2. Click on New button on the toolbar - select VLAN:

     
     
     

  3. On the New VLAN configuration page:

     1. Enter the VLAN ID (this is the "Tag").
     2. Assign this VLAN to port that is not assigned to any Switch or Bridge.
     3. Enter IP address and Subnet mask.

     Example:

     

   

  Notes:

  • You are not obligated to use a single port to manage and handle the Tag Based VLAN.
  • Assigning a VLAN to a port is like configuring the port to a VLAN trunk.

  Example:

  

Related documentation:

• Check Point 600 Appliance Administration Guide (R75.20, R77.20) - Chapter "Appliance Configuration" - Managing the Device - Configuring the Local Network
• Check Point 1100 Appliance Administration Guide (R75.20 Locally Managed , R75.20 Centrally Managed, R77.20 Locally Managed, R77.20 Centrally Managed) - Chapter "Appliance Configuration" - Managing the Device - Configuring the Local Network
• Check Point 1200R Appliance Administration Guide (R77.20 Locally Managed, R77.20 Centrally Managed) - Chapter "Appliance Configuration" - Managing the Device - Configuring the Local Network
• Check Point 730/750 Appliance Administration Guide (R77.20) - Chapter "Appliance Configuration" - Managing the Device - Configuring the Local Network

• To configure a "Port Based VLAN":

  Note: This term is used on Edge / Safe@Office device to virtually distinguish between the physical LAN ports that are connected to the same LAN Switch.

  To assign a different subnet for each port, add a "new network", set it as "Port based VLAN" and assign is to a designated LAN port.

  Example:

  

  

  
  
  

• To configure a "Tag Based VLAN":

  1. Add a "new network", set it as "Tag Based VLAN", set the tag ID that will represent the network (e.g., "4"), and set the correct Network scheme. You can create as many Tag Based VLAN as needed.

     Example:

     
     
     

  2. The physical link connection for all those Tag Based VLANs will be the DMZ port. The DMZ port must be assigned as VLAN Trunk.
     In addition, you must connect a Layer 3 switch that manages the VLAN networks themselves.

     Example:

     
     
     

  3. You must create static routes for inbound connections:

     • Source: Any
     • Destination: VLAN Network
     • Next Hop: VLAN Default Gateway IP address

     Example:

     

Related documentation:

• UTM-1 Embedded NGX User Guide v8.2 - Chapter "Managing Your Network" - Configuring Network Settings - Configuring VLANs
• Safe@Office User Guide v8.2 - Chapter "Managing Your Network" - Configuring Network Settings - Configuring VLANs