[{"data":1,"prerenderedAt":439},["ShallowReactive",2],{"blog-\u002Fen\u002Fblog\u002Fconfiguration-vlan-avec-vyatta":3,"blog-\u002Fen\u002Fblog\u002Fconfiguration-vlan-avec-vyatta-surround":385,"blog-\u002Fen\u002Fblog\u002Fconfiguration-vlan-avec-vyatta-certifications":438},{"id":4,"title":5,"body":6,"categories":371,"cover":373,"cover_contain":374,"credly_badge_id":375,"date":376,"description":377,"extension":378,"meta":379,"navigation":374,"path":380,"related_certifications":375,"seo":381,"slug":382,"stem":383,"__hash__":384},"blog\u002Fen\u002Fblog\u002Fconfiguration-vlan-avec-vyatta.md","Configuring VLANs with Vyatta",{"type":7,"value":8,"toc":362},"minimark",[9,14,18,22,42,58,91,96,103,114,118,202,206,332,351,355,358],[10,11,13],"h2",{"id":12},"real-world-use-case","Real-world use case",[15,16,17],"p",{},"You need to isolate traffic on the same switch: here's how to configure a VLAN with Vyatta.",[10,19,21],{"id":20},"vyatta-virtual-local-area-network-vlan","Vyatta: Virtual Local Area Network (VLAN)",[15,23,24,25,29,30,33,34,37,38,41],{},"A ",[26,27,28],"strong",{},"virtual local area network"," (VLAN) is an independent \"",[26,31,32],{},"logical","\" ",[26,35,36],{},"computer network",".\n",[26,39,40],{},"VLANs"," are essential because they allow:",[43,44,45,49,52,55],"ul",{},[46,47,48],"li",{},"better network management.",[46,50,51],{},"optimizing bandwidth.",[46,53,54],{},"reducing collision domains.",[46,56,57],{},"strengthening security.",[15,59,60,61,64,65,68,69,37,72,76,77,76,82,76,85,90],{},"The following example covers ",[26,62,63],{},"networking"," with ",[26,66,67],{},"VLAN IDs"," on ",[26,70,71],{},"VMware ESXi 5",[73,74,75],"em",{},"I removed the"," ",[73,78,79],{},[26,80,81],{},"IP addresses",[73,83,84],{},"since they belonged to a",[73,86,87],{},[26,88,89],{},"small production server","*.*",[92,93,95],"h3",{"id":94},"esxi-networking-diagram-with-vyatta-vlan","ESXi networking diagram with Vyatta (vlan):",[15,97,98],{},[99,100],"img",{"alt":101,"src":102},"","\u002Fimages\u002Fblog\u002Fconfiguration-vlan-avec-vyatta\u002F59e5ca8972.png",[15,104,105,106,109,110,113],{},"Vyatta uses two network adapters: ",[26,107,108],{},"WAN"," and ",[26,111,112],{},"LAN-TRUNK",".\nLAN-TRUNK uses VLAN ID 4095 to reach the other VLAN IDs.\nWindows Server 2012 uses VLAN ID 10 (RDP server).\nDebian uses VLAN ID 20 (Rsyslog server).\nVLAN ID 30, meanwhile, is empty.",[92,115,117],{"id":116},"configuring-the-wan-and-lan-trunk-interfaces","Configuring the WAN and LAN-TRUNK interfaces:",[119,120,124],"pre",{"className":121,"code":122,"language":123,"meta":101,"style":101},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","set interfaces ethernet eth0 address X.X.X.X\u002FX\nset interfaces ethernet eth0 description WAN\nset interfaces ethernet eth1 address 192.168.0.1\u002F24\nset interfaces ethernet eth1 description LAN-TRUNK\n","bash",[125,126,127,152,169,186],"code",{"__ignoreMap":101},[128,129,132,136,140,143,146,149],"span",{"class":130,"line":131},"line",1,[128,133,135],{"class":134},"s2Zo4","set",[128,137,139],{"class":138},"sfazB"," interfaces",[128,141,142],{"class":138}," ethernet",[128,144,145],{"class":138}," eth0",[128,147,148],{"class":138}," address",[128,150,151],{"class":138}," X.X.X.X\u002FX\n",[128,153,155,157,159,161,163,166],{"class":130,"line":154},2,[128,156,135],{"class":134},[128,158,139],{"class":138},[128,160,142],{"class":138},[128,162,145],{"class":138},[128,164,165],{"class":138}," description",[128,167,168],{"class":138}," WAN\n",[128,170,172,174,176,178,181,183],{"class":130,"line":171},3,[128,173,135],{"class":134},[128,175,139],{"class":138},[128,177,142],{"class":138},[128,179,180],{"class":138}," eth1",[128,182,148],{"class":138},[128,184,185],{"class":138}," 192.168.0.1\u002F24\n",[128,187,189,191,193,195,197,199],{"class":130,"line":188},4,[128,190,135],{"class":134},[128,192,139],{"class":138},[128,194,142],{"class":138},[128,196,180],{"class":138},[128,198,165],{"class":138},[128,200,201],{"class":138}," LAN-TRUNK\n",[92,203,205],{"id":204},"configuring-vlans-on-the-lan-trunk-interface","Configuring VLANs on the LAN-TRUNK interface:",[119,207,209],{"className":121,"code":208,"language":123,"meta":101,"style":101},"set interfaces ethernet eth1 vif 10 address 192.168.10.1\u002F24\nset interfaces ethernet eth1 vif 10 description VLAN-10\nset interfaces ethernet eth1 vif 20 address 192.168.20.1\u002F24\nset interfaces ethernet eth1 vif 20 description VLAN-20\nset interfaces ethernet eth1 vif 30 address 192.168.30.1\u002F24\nset interfaces ethernet eth1 vif 30 description VLAN-30\n",[125,210,211,233,252,272,291,312],{"__ignoreMap":101},[128,212,213,215,217,219,221,224,228,230],{"class":130,"line":131},[128,214,135],{"class":134},[128,216,139],{"class":138},[128,218,142],{"class":138},[128,220,180],{"class":138},[128,222,223],{"class":138}," vif",[128,225,227],{"class":226},"sbssI"," 10",[128,229,148],{"class":138},[128,231,232],{"class":138}," 192.168.10.1\u002F24\n",[128,234,235,237,239,241,243,245,247,249],{"class":130,"line":154},[128,236,135],{"class":134},[128,238,139],{"class":138},[128,240,142],{"class":138},[128,242,180],{"class":138},[128,244,223],{"class":138},[128,246,227],{"class":226},[128,248,165],{"class":138},[128,250,251],{"class":138}," VLAN-10\n",[128,253,254,256,258,260,262,264,267,269],{"class":130,"line":171},[128,255,135],{"class":134},[128,257,139],{"class":138},[128,259,142],{"class":138},[128,261,180],{"class":138},[128,263,223],{"class":138},[128,265,266],{"class":226}," 20",[128,268,148],{"class":138},[128,270,271],{"class":138}," 192.168.20.1\u002F24\n",[128,273,274,276,278,280,282,284,286,288],{"class":130,"line":188},[128,275,135],{"class":134},[128,277,139],{"class":138},[128,279,142],{"class":138},[128,281,180],{"class":138},[128,283,223],{"class":138},[128,285,266],{"class":226},[128,287,165],{"class":138},[128,289,290],{"class":138}," VLAN-20\n",[128,292,294,296,298,300,302,304,307,309],{"class":130,"line":293},5,[128,295,135],{"class":134},[128,297,139],{"class":138},[128,299,142],{"class":138},[128,301,180],{"class":138},[128,303,223],{"class":138},[128,305,306],{"class":226}," 30",[128,308,148],{"class":138},[128,310,311],{"class":138}," 192.168.30.1\u002F24\n",[128,313,315,317,319,321,323,325,327,329],{"class":130,"line":314},6,[128,316,135],{"class":134},[128,318,139],{"class":138},[128,320,142],{"class":138},[128,322,180],{"class":138},[128,324,223],{"class":138},[128,326,306],{"class":226},[128,328,165],{"class":138},[128,330,331],{"class":138}," VLAN-30\n",[15,333,334,335,338,339,342,343,350],{},"On the 3 VLANs above, you can enable your ",[26,336,337],{},"DHCP servers",", ",[26,340,341],{},"NAT"," rules, etc.\nFor anyone who may have forgotten the steps to follow: ",[344,345,349],"a",{"href":346,"rel":347},"https:\u002F\u002F\u002F\u002Fwww.kassianoff.fr\u002Fblog\u002Ffr\u002Fconfiguration-de-base-sous-vyatta",[348],"nofollow","previous article",".",[10,352,354],{"id":353},"conclusion","Conclusion",[15,356,357],{},"This configuration sets up tagged VLANs on Vyatta within a virtualized VMware ESXi environment, with a dedicated LAN-TRUNK interface for carrying the different VLAN IDs. Each VLAN can then receive its own DHCP configuration or NAT rules, as detailed in the previous article on basic configuration. It's a simple way to logically segment a virtualized network without multiplying physical interfaces.",[359,360,361],"style",{},"html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}",{"title":101,"searchDepth":154,"depth":154,"links":363},[364,365,370],{"id":12,"depth":154,"text":13},{"id":20,"depth":154,"text":21,"children":366},[367,368,369],{"id":94,"depth":171,"text":95},{"id":116,"depth":171,"text":117},{"id":204,"depth":171,"text":205},{"id":353,"depth":154,"text":354},[372],"Réseau","\u002Fimages\u002Fblog\u002Fconfiguration-vlan-avec-vyatta\u002Fa44b82e35f.jpg",true,null,"2013-10-17","Configure a virtual private network (VLAN). Integrate Vyatta into an ESXi networking setup. Prerequisite: master ESXi and Vyatta networking.","md",{},"\u002Fen\u002Fblog\u002Fconfiguration-vlan-avec-vyatta",{"title":5,"description":377},"configuration-vlan-avec-vyatta","en\u002Fblog\u002Fconfiguration-vlan-avec-vyatta","E5dWr5Kr_cPG75jfcflbRyusKl3-0UTHjErqS0zZyhE",[386,392,398,405,412,419,425,432],{"title":387,"path":388,"stem":389,"date":390,"cover":391,"categories":375,"children":-1},"Installing a Firefox Sync Server","\u002Fen\u002Fblog\u002Finstallation-serveur-firefox-sync","en\u002Fblog\u002Finstallation-serveur-firefox-sync","2013-11-01","\u002Fimages\u002Fblog\u002Finstallation-serveur-firefox-sync\u002Feb09763184.jpg",{"title":393,"path":394,"stem":395,"date":396,"cover":397,"categories":375,"children":-1},"Installing Zimbra 8 Open Source Edition","\u002Fen\u002Fblog\u002Finstallation-zimbra-open-source-edition","en\u002Fblog\u002Finstallation-zimbra-open-source-edition","2013-10-24","\u002Fimages\u002Fblog\u002Finstallation-zimbra-open-source-edition\u002F1a88e8245b.jpg",{"title":399,"path":400,"stem":401,"date":402,"cover":403,"categories":404,"children":-1},"iSCSI RPN-SAN with VMware ESXi","\u002Fen\u002Fblog\u002Fblog-iscsi-rpn-san-avec-vmware-esxi","en\u002Fblog\u002Fblog-iscsi-rpn-san-avec-vmware-esxi","2013-10-23","\u002Fimages\u002Fblog\u002Fblog-iscsi-rpn-san-avec-vmware-esxi\u002Fd8c6089e77.png",[372],{"title":406,"path":407,"stem":408,"date":409,"cover":410,"categories":411,"children":-1},"Configuring a Pseudo-Ethernet Interface with Vyatta","\u002Fen\u002Fblog\u002Fconfiguration-une-pseudo-ethernet-interface-avec-vyatta","en\u002Fblog\u002Fconfiguration-une-pseudo-ethernet-interface-avec-vyatta","2013-10-20","\u002Fimages\u002Fblog\u002Fconfiguration-une-pseudo-ethernet-interface-avec-vyatta\u002Fa44b82e35f.jpg",[372],{"title":413,"path":414,"stem":415,"date":416,"cover":417,"categories":418,"children":-1},"Virtual Networking with VMware ESXi 5","\u002Fen\u002Fblog\u002Fblog-mise-reseau-virtuelle-vmware-esxi","en\u002Fblog\u002Fblog-mise-reseau-virtuelle-vmware-esxi","2013-10-10","\u002Fimages\u002Fblog\u002Fblog-mise-reseau-virtuelle-vmware-esxi\u002Fd8c6089e77.png",[372],{"title":420,"path":421,"stem":422,"date":423,"cover":424,"categories":375,"children":-1},"GhettoVCB, the Free Backup Solution for VMware ESXi","\u002Fen\u002Fblog\u002Fghettovcb-sauvegarde-gratuite-vmware-esxi","en\u002Fblog\u002Fghettovcb-sauvegarde-gratuite-vmware-esxi","2013-10-08","\u002Fimages\u002Fblog\u002Fghettovcb-sauvegarde-gratuite-vmware-esxi\u002Fd8c6089e77.png",{"title":426,"path":427,"stem":428,"date":429,"cover":430,"categories":431,"children":-1},"Configuring VPN Remote Access with Vyatta","\u002Fen\u002Fblog\u002Fconfiguration-des-acces-distance-vpn-avec-vyatta","en\u002Fblog\u002Fconfiguration-des-acces-distance-vpn-avec-vyatta","2013-10-03","\u002Fimages\u002Fblog\u002Fconfiguration-des-acces-distance-vpn-avec-vyatta\u002Fa44b82e35f.jpg",[372],{"title":433,"path":434,"stem":435,"date":436,"cover":437,"categories":375,"children":-1},"Arch Linux Distribution: Customization","\u002Fen\u002Fblog\u002Fdistribution-arch-linux-personnalisation","en\u002Fblog\u002Fdistribution-arch-linux-personnalisation","2013-09-25","\u002Fimages\u002Fblog\u002Fdistribution-arch-linux-personnalisation\u002F68a1cb957a.png",[],1786644893267]