This tutorial assumes that you have correctly configured the switch to assign a VLAN identifier (e.g. 220) to the port intended to carry the Blue zone subnet. Furthermore it assumes that you have two physical Network cards, one connected to the WAN and carrying the RED zone and the other connected to the switch.
The configuration procedure is a four step process:
setupand select red, green and blue network type; set the Blue zone to None and assign Green and Red to the two physical interfaces; reboot!
setupin the console, and re-assign the Blue zone to the newly created hybrid interface (here
If you are unable to see the Blue zone in the DHCP configuration page, open a console and run the following command:
ip address show or
ip a, you should see an output similar to the image below.
Please note the presence of the device
blue0@green0, if you do not see this, repeat the steps from 1 to 4, and do not forget to reboot when noted in the tutorial.
By default the BLUE network has a MAC filter turned on. When using the BLUE network with VLAN be aware the MAC filter might need to be disabled or each DHCP recipient to be approved. See Blue Access wiki page.
this tutorial has been lifted from the following posts written by @bonnietwin and @darkhand on the community forum:
- https://community.ipfire.org/t/segregate-one-vlan-from-rest-of-network/8630/23 ↩