We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
Accept
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda Web Security Gateway
Overview Documentation Training Certification Materials

Back to Knowledgebase

When would virtual interfaces be needed without the use of VLANs?

  • Type: Knowledgebase
  • Date changed: 10 months ago

Solution #00006234

Scope:

Barracuda Web Filter All Firmware Versions


Answer:
The following scenario would require the use of vertical interfaces even if you are not using VLANs:
  1. The network is configured with multiple internal subnets.
  2. Thenetwork is configured to use the firewall to route between these internal subnets but does not have trunking or VLANs configured.
  3. Sub-interfaces are configured in each subnet on the firewall.
  4. There is no internal layer 3 switch on the network.
In this situation, you must obtain a free IP address in each subnet that is not the native subnet of the web filter. These IP addresses will be used to configure virtual interfaces to allow the web filter to reside in each subnet and be able to filter traffic for each subnet.

Procedure:

  1. In the Advanced Tab > Advanced Networking page under Virtual Interfaces, enter an IP address and corresponding subnet mask for your first additional subnet.
  2. The gateway address for this virtual interface should be set to the IP address on the firewall that is in the corresponding subnet.
  3. The device mode for the virtual interface should be set to bridge.
  4. Click the add button to add the virtual interface configuration.
  5. Repeat the steps for any additional subnets.
  6. Test ensure connectivity and proper filtering.

*NOTE*
In this scenario, no configuration is required on Advanced > Advanced Network > IP Routing for these virtual interfaces to work correctly.