RED50 VLAN Examples please!!

Question

Hello. 
 
 I have a SG330 at main office connecting to a RED50 in branch office(KG). Connected to that RED is a Cisco switch with VLANs. I want the VLANs from main office to talk to branch office VLANs 
 
 So on the SG330 
 Internal on eth9 - 10.0.0.248/24 - Type:Ethernet 
 Vlan5 on eth9(VLAN 5) - 10.0.10.248/24 - Type:Ethernet VLAN 
 Vlan10 on eth9(VLAN 10) - 10.0.10.248/24 - Type:Ethernet VLAN 
 plus a bunch of others eth9(VLAN X) with my Cisco switch plugged in port 9 (VLAN 1 UP, VLAN 5,10,20,30 T) 
 
 KG RED50 VLAN 1 on red1 - 10.1.254.248 - Type:Ethernet 
 KG RED50 VLAN 1100 on red1 - 10.21.0.248 - Type:Ethernet VLAN 
 KG RED50 VLAN 1105 on red1 - 10.21.5.248 - Type:Ethernet VLAN 
 plus a bunch of others to add on red1 after I've got those to works. 
 I've alowed all these VLANs to all these VLANs in the firewall 
 In red1 switch port configuration I've tried a few things... with port 1 
 Untagged 1 or tagged(1,1100,1105) or etc and playing with split and unified 
 RED50 port1 is connected to my Cisco switch port 1 (VLAN1 UP, VLAN 1100,1105 T) 
 On some random test RED VLAN 1 was able to talk to the other side to all VLANs, but never got the others to talks... 
 
 Any thoughts on how this could work?? 
 Wondering if there is a proper guide for this??

EricFrancoeur · Answer

Replying to myself again... Feels like I have no friends... :-P 
 Anyway to who ever this may help... 
 I've tried to make VLAN 1254 my default vlan and then changing "KG RED50 VLAN 1 on red1 - 10.1.254.248 - Type:Ethernet" to type Ethernet VLAN with 1254 as it's vlan. And it didn't work as expected. 
 So what I've realized that you have to burn a VLAN number on your switch to be the UNTAGGED vlan on the port that your RED50 is connected to... In my case all red1 interface are set to type ETHERNET VLAN. Switch Port Configuration of LAN1 is TAGGED with LAN1 VIDs 1100,1105,1110,1254. 
 Plug LAN1 into your switch port 1 (or any you want, doesn't matter) On switch port 1 put the burnt VLAN number as UP (doesn't matter the number), and all your good vlan as T. In my case I've put all vlan as tagged on port 1, so by default it puts VLAN 4095 as P and there is no U... so my port VLAN membership for port 1 looks like this 1 100T , 1105T , 1110T , 1254T , 4095P. Might do something else on your model. 
 So now everyone talks to everyone and we are all a happy family 
 
 Side note: Even if I've set the Operation Mode to Standard/Split it seems that the Internet traffic goes thru the main office anyway... But it's Friday passed 5pm here, I'm not going to worry about that now...

BAlfson · Answer

Eric, VLAN 1 is reserved in the UTM for Wireless Protection. I'm surprised it worked even a little bit. Probably not for any traffic transiting the UTM. 
 Cheers - Bob