One physical port for Internal/External/Management (using vlan id)

[aroika]

Hello,

I want to deploy a PSA appliance using only one physical port.

Internal/External/Management traffic must be segmented using VLAN ID (a trunk is configured on switch side).

Is it possible to do this setup ? Is it sufficient if i configure the "VLAN ID" setting on each interfaces ? Or a physical connection must be made ?

thanks a lot

[[email protected]]

Ideally, you can create 2 new VLAN interfaces under the Internal port (Default VLAN for Internal port), one for External and another for management traffic by configuring the sign-in policies accordingly, however it is considered as Internal port VLANs at the end.

I would recommended having separate physical connection for each traffic to get the most out of the VPN server. If it's PSA7000c/f device, then beware about this https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44446/?kA13Z000000L3HA.