User manual SONICWALL SWITCHING NSA 2400MX IN SONICOS ENHANCED 5.7 FEATURE MODULE

[. . . ] Switching on the SonicWALL NSA 2400MX in SonicOS Enhanced 5. 7 Document Scope This solutions document describes how to configure and manage the Switching feature on a SonicWALL NSA 2400MX running SonicOS Enhanced 5. 7. This document contains the following sections: · · · "Feature Overview" section on page 1 "Configuring Switching" section on page 4 "Glossary" section on page 30 Feature Overview This section provides an introduction to the Switching feature. This section contains the following subsections: · · · · "What is Switching on the SonicWALL NSA 2400MX?" section on page 1 "Benefits of Switching" section on page 2 "How Does Switching Work on the SonicWALL NSA 2400MX?" section on page 3 "Supported Platforms" section on page 3 What is Switching on the SonicWALL NSA 2400MX? SonicOS Enhanced 5. 7 introduces Layer 2 (data link layer) switching functionality on the SonicWALL NSA 2400MX appliance. The SonicWALL NSA 2400MX appliance is a Unified Threat Management (UTM) security appliance that integrates the WAN flexibility of a router with 24 built-in Ethernet switch ports. [. . . ] The aggregator port must be assigned a unique key. By default, the aggregator port key is the same as its interface number. Non-aggregator ports can be optionally configured with a key, which can help prevent an erroneous LAG if the switch connections are wired incorrectly. Ports bond together if connected to the same link partner and their keys match. If there is no key configured for a port (if the port is in auto mode), it will bond with an aggregator that is connected to the same link partner. The link partner is discovered via LACP messages. A link partner cannot be discovered for Static link aggregation. In this case, ports aggregate based on keys alone. Like a PortShield host, the aggregator port cannot be removed from the LAG since it represents the LAG in the system. Note Once link aggregation has been enabled on VLAN trunk ports, additional VLANs cannot be added or deleted on the LAG. Note If you need to enable RSTP on the LAG, first enable RSTP on the individual members and then enable link aggregation. 16 Switching in SonicOS Enhanced 5. 7 Configuring Switching Creating a Logical Link (LAG) To create a Logical Link (LAG), perform the following steps: Step 1 Step 2 On the Switching > Link Aggregation page, click the Add button. In the Add LAG Port window, select the interface from the Port drop-down list. Step 3 Step 4 Step 5 Step 6 Step 7 To specify a key, clear the Auto-Detect checkbox and type the desired key into the Key field. If this interface will be the aggregator for the LAG, select the Aggregator checkbox. Only one interface can be an aggregator for a LAG. To enable LACP, select the LACP Enable checkbox. Dynamic Link Aggregation is supported with the use of LACP. The link partner is discovered via LACP messages. On the Switching > Link Aggregation page, click the Add button again. Switching in SonicOS Enhanced 5. 7 17 Configuring Switching Step 8 In the Add LAG Port window, select the interface for the link partner from the Port drop-down list. Step 9 If you specified a key for the first interface (the aggregator), clear the Auto-Detect checkbox and type the same key into the Key field. If Auto-Detect was left enabled for the first interface, leave it enabled for this one as well. Step 10 Clear the Aggregator checkbox. Only one interface can be an aggregator for a LAG. Step 11 Select the LACP Enable checkbox. Step 12 Click OK. The Switching > Link Aggregation page displays the LAG. The Partner column will display the MAC addresses of the link partners after they are physically connected. 18 Switching in SonicOS Enhanced 5. 7 Configuring Switching Configuring Port Mirroring You can configure Port Mirroring on the SonicWALL NSA 2400MX to send a copy of network packets seen on one or more switch ports (or on a VLAN) to another switch port called the mirror port. By connecting to the mirror port, you can monitor the traffic passing through the mirrored port(s). [. . . ] The Edit Static MAC Address window opens. Step 2 Step 3 Select a different address object or select Create new address object from the MAC Address drop-down list. When finished, click OK. Deleting MAC Address Objects To delete one or more MAC address objects, perform the following steps: Step 1 Step 2 Step 3 To delete a single MAC address object, click the Delete icon in the row for the MAC address object you want to delete. To delete multiple MAC address objects, select the checkboxes next to the MAC address objects you want to delete and then click the Delete Selected button at the bottom of the page. Click OK in the confirmation dialog box. Switching in SonicOS Enhanced 5. 7 29 Glossary Glossary BPDU Bridge Protocol Data Unit ­ Used in RSTP, BPDUs are special data frames used to exchange information about bridge IDs and root path costs. [. . . ]