We have an environment with 4 Hyper-V servers connected through a Dell PowerConnect 2824 switch to two Cisco PIX redundant firwalls.
Right now, it all works without a VLAN, but I want to isolate some of the traffic, so I need to set a VLAN tag on a specific interface of a Virtual Machine, and then let the traffic exit the switch port with this specific VLAN tag, and get to the firewalls, but on entry to the port, it needs to be untagged, so that the firewall can process it as if it were a regular untagged packet.
So I need to let these packets go out with the VLAN tag on any of the ports, but are only allowed entry on two specific ports (at which point the VLAN tag is stripped out)
Regular untagged packets should be unaffected.
I'm not very experienced with VLANs so I wonder if this is possible. Some documentation on the switch can be found here: