Page 56 / 58 Scroll up to view Page 51 - 55
4.
Modify Default VLAN group (VLAN ID = 1) to apply two new VLAN groups:
The specific ports above have the following Port VLAN ID settings:
Default VLAN: Port 7 – Port 26 (all U),
VID = 1
VLAN 1: Port 1 (U), Port 2 (U), Port 3 (T),
VID = 10
VLAN 2: Port 4 (U), Port 5 (T), Port 6 (U),
VID = 20.
5.
The following scenarios will produce results as described below:
(1). If an untagged packet enters Port 1, the switch will tag it with a VLAN tag value 10. The packet will have access to Port 2 and Port 3. The
outgoing packet will be stripped away its tag becoming an untagged packet as it leaves Port 2. For Port 3, the outgoing packet will leave as a
tagged packet with a VLAN tag value 10.
(2). If a tagged packet with a VLAN tag value 10 enters Port 3, the packet will have access to Port 1 and Port 2. If the packet leaves Port 1 and/or
Port 2, it will be stripped away its tag becoming an untagged packet as it leaves switch.
(3). If an untagged packet enters Port 4, switch will tag it with a VLAN tag value 20. The packet will have access to Port 5 and Port 6. The outgoing
packet will be stripped away its tag becoming an untagged packet as it leaves Port 6. For Port 5, the outgoing packet will leave as a tagged packet
with a VLAN tag value 20.
Page 56 of 58
Downloaded from
www.Manualslib.com
manuals search engine
Page 57 / 58
APPENDIX C: Virtual Local Area Network (VLAN): Port-based VLAN
Port-based VLANs will help efficiently confine the broadcast traffic to the switch ports with the specific VLAN. This switch allows up to 26 port-based
VLAN groups, so each port can be in its own VLAN.
A port may be a member of more than one VLAN.
The default VLAN group port-based VLAN
that have all ports belonging to VLAN 1.
Port-based VLAN Behavior in the FS526T
Packets received by the switch will be treated in the following way:
o
When a packet enters a port, it only can proceed to other ports on that same VLAN. The packet will only be sent to other ports with the
same VLAN ID membership.
o
If the port in which the packet entered does not have membership with the same VLAN as the source port does, the packet will be
dropped.
Example
This example basically demonstrates how the port-based VLANs work to meet your needs.
1)
Setup the following VLANs, each with defined descriptions:
VLAN 1 (IT department)
VLAN 2 (Sales department)
VLAN 3 (Marketing department)
VLAN 4 (Accounting department).
2)
Configure the VLAN membership. The figure below shows all different VLANs to be setup. Be sure to set all of them as shown below.
Page 57 of 58
Downloaded from
www.Manualslib.com
manuals search engine
Page 58 / 58
3)
Setting up second VLAN group (Sales), VLAN ID = 02, with membership of ports 1~8, 25.
4)
Setting up third VLAN group (Marketing), VLAN ID = 03, with membership of ports 7~14, 25.
5)
Setting up fourth VLAN group (Accounting), VLAN ID = 04, with membership of ports 19~20, 25.
6)
Setting up first VLAN group (IT), VLAN ID = 01, with membership of all ports.
Since VLAN ID 01 has been setup by default, you will have to remove the ports that belong to all other VLAN group except port 25.
7)
Ports 7 and 8 are on both VLAN 02 and 03 because they connect to a file server and print server. Sales and Marketing departments can both
use these servers.
8)
Port 25 provides Gigabit speed for email server and Internet connection so each VLAN included port 25.
It is the uplink port, so each VLAN
must have it to communicate to the rest of the network.
The specific ports above have the following functions:
VLAN 1: Port 15 – Port 18, Port 21 – Port 24, Port 26, for IT department to monitor and control activities on all other VLANs
VLAN 2: Port 1 – Port 8, for Sales department, port 7 and 8 connect to file archives and printer server.
VLAN 3: Port 7 – Port 14, for Marketing department, port 7 and 8 connect to file archives and printer server.
VLAN 4: Port 19 – Port 20, for Accounting department, its work is kept secret from other departments except IT.
Scenarios:
If a packet comes in on port 2, it can go to ports 1, 3, 4, 5, 6, 7, 8, and 25, as those are the only ports in that VLAN.
A Sales person on Port 2 can
get to the Internet, send and receive email, but cannot access the accounting department print server or file archives.
If a Marketing user sends out a broadcast message, the sales and accounting departments will not be affected by the message, as it will not go out
on their ports. Only the marketing department and the IT group will get the broadcast message.
Page 58 of 58
Downloaded from
www.Manualslib.com
manuals search engine

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top