diff --git a/sql/database-create.sql b/sql/database-create.sql
index 4d2ec667466d13d410da3d36da94edc9c53701c5..0a19635db07cc9e5f1f271a0bdeabb0038609cb0 100644
--- a/sql/database-create.sql
+++ b/sql/database-create.sql
@@ -411,6 +411,7 @@ CREATE TABLE firewalls (
   type enum('ipfw','ipfw2','ipchains','ipfw2-vlan') NOT NULL default 'ipfw',
   style enum('open','closed','basic') NOT NULL default 'basic',
   vlan int(11) default NULL,
+  vlanid int(11) default NULL,
   PRIMARY KEY  (pid,eid,fwname),
   KEY vlan (vlan)
 ) TYPE=MyISAM;
diff --git a/sql/database-migrate.txt b/sql/database-migrate.txt
index 8f679760c45470b2e1f41c9bfba8ddb88341dc92..66a7c31b1a63a43f4ed18cd61222e38cdc1579e1 100644
--- a/sql/database-migrate.txt
+++ b/sql/database-migrate.txt
@@ -2141,3 +2141,8 @@ last_net_act,last_cpu_act,last_ext_act);
        appropriate place in reserved.  Then do:
 
 	alter table nodes drop column cnet_vlan;
+
+1.285: More firewall state.  Possibly temporary hack, store unique vlan
+       ID in firewalls table:
+
+	alter table firewalls add vlanid int(11) default NULL;