Configure a Layer 2 Switch Trunk Port

1. Select NetworkInterfacesEthernet.
2. Click the interface you want to configure.
3. For Interface Type, select Layer2 Switch.
4. For Port Type, select Trunk.

5. On the Config tab, configure the native VLAN for untagged ingress traffic:

   1. For Native VLAN, enter the VLAN ID for untagged frames arriving on this trunk.
   2. For VLAN, choose the corresponding VLAN object.
   3. (Optional) Enable Tagged Native VLAN if you want the firewall to send native VLAN traffic out as tagged. Incoming untagged frames are treated as belonging to the native VLAN and always exit tagged.
   4. (Optional) For Security Zone, choose a zone to apply zone-based security policy to east-west traffic on this port. Leave as None for hardware switching without ZBFW inspection.
6. On the VLAN tab, add a sub-interface for each additional tagged VLAN the trunk carries:

   1. Click Add.
   2. For the sub-interface number, enter a unique integer, for example, 200, which creates the sub-interface ethernet1/7.200.
   3. For VLAN Tag, enter the VLAN ID for this sub-interface (1-4000, excluding 4001-4095).
   4. For VLAN, choose the VLAN object for this VLAN.
   5. (Optional) For Security Zone, choose a zone to apply zone-based security policy to east-west traffic on this port. Leave as None for hardware switching without ZBFW inspection.

      Once a zone is assigned to a VLAN on an interface, that VLAN becomes zone-based. All Layer 2 switch interfaces that are members of that VLAN must also have a zone assigned, though each interface can be assigned a different zone.

      The VLAN tag configured on an interface must be consistent across all Layer 2 switch interfaces that are members of that VLAN.
   6. Repeat for each additional VLAN the trunk carries.
7. (Optional) To limit BUM flooding, click the Storm Control tab. See Configure Storm Control.
8. (Optional) To apply port-level STP parameters, in the STP tab, select the STP port profile you created. If no port profile is selected, default STP parameters are applied to the port. Optionally, specify the STP Port Priority and Path Cost to override the default values applied to the port. See Configure Spanning Tree Protocol.
9. Click OK and Commit.