Configuring Other Parameters for Port

Basic Options

Select the port type as WAN Wide Area Network. WAN is a telecommunications network or computer network that extends over a large geographical distance. or LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. for WAN interface and LAN interface respectively.

Select this option to set the user state of the port interface as admin.

Select one of the following values (Mbps) for speed operation of the port:

• 10
• 100
• 1000
• auto

Select one of the following values for speed mode of the port:

• 40Gbps
• 10Gbps
• 1Gbps

Select one of the following values for duplex operation of the port:

• auto
• half
• full

Enable this option to set the port interface as a PoE Power over Ethernet. PoE is a technology for wired Ethernet LANs to carry electric power required for the device in the data cables. The IEEE 802.3af PoE standard provides up to 15.4 W of power on each port. source.

Enable this option to configure the port as a trusted interface.

Select one of the following options from the drop-down list:

• Inbound and Outbound—Select this option to apply a firewall Firewall is a network security system used for preventing unauthorized access to or from a private network. policy for the incoming and outgoing traffic.
• Per-Session—Select this option to apply a firewall policy for the session.

Select the port mode. You can set ports to either access mode or trunk mode.

• Access—By default, ports are set to access mode to carry traffic only for the VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. to which they are assigned. For Access mode, select the VLAN and the VLAN trust check box. To apply a policy for the VLAN traffic on access port, see Applying Policies to Gateway Interfaces.
• Trunk— In trunk mode, a port can carry traffic for multiple VLANs. When the Trunk mode is selected, specify whether the port must carry traffic for all VLANs configured for the branch or for specific VLANs only. You can also configure the native VLAN and session firewall policy on a port. To apply a policy for VLANs in trunk mode, see Applying Policies to Gateway Interfaces.

Select the VLAN interfaces that you want to associate to the port.

Enable this option to set the VLAN interface as trusted.

The firewall policy that is applied to the trusted VLAN which is associated to the port. You can apply firewall policies only for trusted VLANs.

For more information on applying VLAN policies, see Applying Policies to Gateway Interfaces.

Optional text string to describe the port interface.

Select this option to enable tunneled node capability for the port interface. By default, this is disabled. The tunneled node connects to one or more client devices at the edge of the network to establish a secure GRE Generic Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network. tunnel.

Select this option to enable Jumbo frame MTU Maximum Transmission Unit. MTU is the largest size packet or frame specified in octets (eight-bit bytes) that can be sent in networks such as the Internet. configured on the interface. This setting is functional only if the Jumbo frame processing is enabled in the firewall policies.

Advanced Options

NOTE: The following advanced options appear only if you click the Show advanced options link below the Ports table.

Select this to enable the switch to send a copy of all network packets seen on one port to another port.

Select this option to enable spanning tree protocol on the port. This is enabled by default.

Specify the spanning tree path cost of the port. The allowed range is 1-65535. The default value is 2000.

Specify the spanning tree priority of the port. The allowed range is 0-255. The default value is 128.

Select this option to enable forwarding of traffic from the port. By default, this option is disabled.

Select this option to enable the port as a point-to-point link. By default, this option is disabled.

Enable BPDU Bridge Protocol Data Unit. A BPDU is a data message transmitted across a local area network to detect loops in network topologies. guard to protect the port from receiving STP Spanning Tree Protocol. STP is a network protocol that builds a logical loop-free topology for Ethernet networks. BPDUs. However, the port can transmit STP BPDUs.

Enable this option if you want the port to transmit LLDP Link Layer Discovery Protocol. LLDP is a vendor-neutral link layer protocol in the Internet Protocol suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, which is principally a wired Ethernet. packets and configure the following LLDP transmissions parameters:

• Transmit interval—Specify the interval between LLDP TLV Type-length-value or Tag-Length-Value. TLV is an encoding format. It refers to the type of data being processed, the length of the value, and the value for the type of data being processed. transmission in seconds. The supported range is 1-3600 seconds and the default value is 30 seconds.
• Transmit hold—Enter a value from 1-100. This value is multiplied by the transmit interval to determine the number of seconds to cache the learned LLDP information before it is cleared. If the transmit-hold value is at the default value of 4, and the transmit interval is at its default value of 30 seconds, then the learned LLDP information is cached for 4 x 30 seconds, or 120 seconds.
• Fast transmit interval—Set the LLDP fast transmission interval in seconds. The supported range is 1-3600. The default value is 1.
• Fast transmit hold—Enter a value from 1-100. This value is multiplied by the fast transmit interval to determine the number of seconds to cache the learned LLDP information before it is cleared. If the fast transmit-hold value is at the default value of 4, and the fast transmit interval is at its default value of 1 second, then the learned LLDP information is cached for 4 x 1 seconds, or 4 seconds.

Select this option to enable the port to receive LLDP packets.

Select this option to enable LLDP-MED LLDP–Media Endpoint Discovery. LLDP-MED facilitates information sharing between endpoints and network infrastructure devices. on the port.

Set or limit the number of MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses learnt on the port. The allowed range is 1-16384.