
Glossary
33
Configuring PortShield Interfaces
Glossary
• 802.1q - An IEEE standard developed to address the problem of how to break large networks into smaller
parts so broadcast and multicast traffic would not obtain more bandwidth than necessary. The standard
also helps provide a higher level of security between segments of internal networks. The 802.1q
specification establishes a standard method for inserting virtual LAN membership information into
Ethernet frames.
• 802.1q Tags - Virtual markers assigned to a physical port on the device that indicate which collision
domain or PortShield interface to which the port belongs.
• Address Object - An aggregation mechanism that allows entities to be defined one time and to be
reused in multiple referential instances throughout SonicOS. PortShield interfaces enable you to
take advantage of the convenience of address objects by allowing you to map them either to a
previously created address object or to an object that you create during the PortShield interface
configuration session. You need to be in Transparent Mode to assign an address object to an
interface.
• PortShield Interfaces - A software mechanism in SonicOS that enables you to configure some or
all of the 24 LAN switch ports on the SonicWALL PRO 1260 into separate contexts, providing
protection from traffic on the WAN and DMZ, and devices inside your network.
• Primary LAN Interface - The default base entity to which all ports on the SonicWALL PRO 1260
belong, acting as the single, collective interface on the device. You can select allowable ports in the
Primary LAN to partition into separate PortShield interfaces that work separately but concurrently
with the Primary LAN interface. The Uplink port and Port 1 are not allowable ports to be included
in a newly created PortShield interface and always belong to the Primary LAN. By default, all
standard addressing and zone assignment defaults apply to the Primary LAN.
• Rate Limiting - A limit that enables you to throttle traffic coming into the SonicWALL PRO 1260.
By specifying a throughput value in SonicOS, you make that value fastest throughput rate by which
incoming traffic can enter the device. This can be helpful in freeing an interface when it is
overloaded with traffic, enabling it to operate more efficiently.
• Static Mode - A method of address assignment that allows you to explicitly assign a single address
to a PortShield interface.
• Transparent Mode - A method of address assignment that allows for the WAN subnetwork to be
shared by the current interface using Address Objects. The interface’s IP address is the same as the
WAN interface IP address. Transparent mode is available on interfaces assigned to Trusted and
Public Zones.
PortShield Feature Module Version History
Version Number Date Notes
1 4/4/05 This document was created.
Comentarios a estos manuales