I am designing a network consisting of close 60 ports, via a managed switch. I intend to deploy multiple VLANs: one for servers, one for desktops, one for guests, etc.
I intend to use the firewall to route between VLANs. (Yes, that's expensive, but in our case, we want to do it).
Does each VLAN need its own dedicated uplink port on the switch and firewall (acting as a router)? That is, if I want 6 VLANs, do I need to configure one port on the switch for each VLAN, and connect each to a different port on the firewall? Or should I use trunking, and send them all to the firewall on the same port? How do I enforce different security for those VLANs (ideally, I'd like physically distinct ports, not just VLAN tagging).
Also, do I need to create management VLANs (for the switch and firewall themselves)?