Focus

Prisma SD-WAN Administrator’s Guide

Configure Layer 2 Switch Ports

Table of Contents

Configure Layer 2 Switch Ports

Lets learn about the L2/L3 switch ports for ION devices in Prisma SD-WAN Netsec.

Where Can I Use This?	What Do I Need?
Prisma SD-WAN	Active Prisma SD-WAN license

The integrated Layer 2 switch ports enable you to connect multiple devices directly on the L2 LAN or add downstream switches or Wireless Access Points (WAP). L2 LAN switch ports are supported only on ION 3200, ION 1200-S, ION 1200-S-C-NA/ROW, and ION 1200-S-C5G-WW on ports 5 -10. These platforms have six 1Gbps RJ-45 L2 switch ports, two 1Gbps RJ-45 WAN ports, and two 2.5Gbps switch to host uplink ports.

When the ION 3200 device is running in L2 mode, it will function as ION 1200-S, and when the ION 3200 is running in L3 mode, it will serve as the current ION 3200 device.

Layer 2 LAN Switch supports:

Supports per port configuration of access or trunk ports.
VLAN definition supports attributes such as numerical ID value, name, and tags. VLAN ID range is 1-4000.
Maximum number of active VLANs is 32.
Native VLAN on a trunk port can be any VLAN ID in the supported range.
Storm Control Thresholds are configurable for Unknown Unicast, Multicast, and Broadcast per port. By default, the Broadcast Storm Control is enabled with a threshold of 1000Kbps.
Spanning Tree supported modes are IEEE 802.1d, IEEE 802.1s, and IEEE 802.1w (default). The modes are automatically detected and switched on receiving the BPDU.
- Configurable Hello Timer, Forward Delay, Max Age, and Aging Timer.
- Configurable Spanning Tree Priority at system level.
- Configurable per port Cost and Priority.
- Configurable BPDU Guard and Root Guard per port.
- Portfast is enabled by default.
QoS is maintained.

L2 Switch ports are supported on a minimum ION device version of 6.0.2 for ION 1200-S and 6.3.1 for ION 3200. You cannot downgrade to a lower version.

Allow IP Addresses in Firewall Configuration

Add a VLAN or Switch Virtual Interface (SVI)