Trunking Between VLANs on One Physical Switch?

Question

My goal is to setup redundant bridging-firewalls between two VLANs on a single PowerConnect 3248. Is this possible? My bridging-firewalls are OpenBSD machines configured as bridges running pf (packet filter). I was thinking it would be cool to use trunking to increase bandwidth as well as redundancy. I tried several configurations on my 3248, but nothing seems to work. The simpliest configuration that works is connecting a single OpenBSD bridge between VLANS 1 & 2 with no trunks. Disconnecting one side of the bridge breaks communication between VLAN 1 & 2, which is expected behavior and proves all traffic must go through the filtering bridge to talk to different VLANs. My setup: VLAN1 -> Ports[13-50] (unused) VLAN2 -> Ports[1-4] (client group 1) VLAN3 -> Ports[5-8] (client group 2) VLAN4 -> Ports[9-12] (bridges and trunk) TRUNK1 -> Ports[9-10] VLAN[4,2] PVID = 4 (bridges listening to client group 1) TRUNK2 -> Ports[11-12] VLAN[4,3] PVID = 4 (bridges listening to client group 2) Bridge1 -> Port[9,11] Bridge2 -> Port[10,12] [VLAN1] = network 1.1.1.0/24 / \ / \ / \ [Trunk1] [Trunk1] = Ports 9,10 on 3248 | | | | [BR1] [BR2] = OpenBSD boxes running as bridges | | | | [Trunk2] [Trunk2] = Ports 11,12 on 3248 \ / \ / \ / [VLAN2] = same IP subnet as VLAN1 Is there a better way? Any pointers in accomplishing my goal will be much appreciated? Basically, I want to (1) create redundant bridges and (2) share load among those bridges. Thanks, Clint Pachl

MiF_STIG · Answer

... sorry, i hit the ENTER touch, so :   - Hi, i don't know that kind of switch, i worked on Avaya, Cisco and Nortel, ... but i gonna try to help you.   - Can you set a port 'passive', turning on if an 'active' port turns down ? (this is called 'software redundancy' by Avaya) - Bridge 1 would be connected to the 'active' port, and Bridge 2 to the 'passive'.   Alex.

MiF_STIG · Answer

-Hi, i don't know that kind of switch, i worked on Avaya, Cisco and Nortel, ... but i gonna try to help you. -Can you affect 2 vlans per port, without activating 802.1q on those ? ... depending on the manufacturer 802.1q can be called

Networking, Internet, & Bluetooth

Was this post helpful?