4.

Modify Default VLAN group (VLAN ID = 1) to apply two new VLAN groups:

The specific ports above have the following Port VLAN ID settings:

Default VLAN: Port 7 – Port 26 (all U),

VID = 1

VLAN 1: Port 1 (U), Port 2 (U), Port 3 (T),

VID = 10

VLAN 2: Port 4 (U), Port 5 (T), Port 6 (U),

VID = 20.

5.

The following scenarios will produce results as described below:

(1). If an untagged packet enters Port 1, the switch will tag it with a VLAN tag value 10. The packet will have access to Port 2 and Port 3. The

outgoing packet will be stripped away its tag becoming an untagged packet as it leaves Port 2. For Port 3, the outgoing packet will leave as a

tagged packet with a VLAN tag value 10.

(2). If a tagged packet with a VLAN tag value 10 enters Port 3, the packet will have access to Port 1 and Port 2. If the packet leaves Port 1 and/or

Port 2, it will be stripped away its tag becoming an untagged packet as it leaves switch.

(3). If an untagged packet enters Port 4, switch will tag it with a VLAN tag value 20. The packet will have access to Port 5 and Port 6. The outgoing

packet will be stripped away its tag becoming an untagged packet as it leaves Port 6. For Port 5, the outgoing packet will leave as a tagged packet

with a VLAN tag value 20.

Page 56 of 58

Downloaded from

www.Manualslib.com

manuals search engine

APPENDIX C: Virtual Local Area Network (VLAN): Port-based VLAN

Port-based VLANs will help efficiently confine the broadcast traffic to the switch ports with the specific VLAN. This switch allows up to 26 port-based

VLAN groups, so each port can be in its own VLAN.

A port may be a member of more than one VLAN.

The default VLAN group port-based VLAN

that have all ports belonging to VLAN 1.

Port-based VLAN Behavior in the FS526T

Packets received by the switch will be treated in the following way:

o

When a packet enters a port, it only can proceed to other ports on that same VLAN. The packet will only be sent to other ports with the

same VLAN ID membership.

o

If the port in which the packet entered does not have membership with the same VLAN as the source port does, the packet will be

dropped.

Example

This example basically demonstrates how the port-based VLANs work to meet your needs.

1)

Setup the following VLANs, each with defined descriptions:

VLAN 1 (IT department)

VLAN 2 (Sales department)

VLAN 3 (Marketing department)

VLAN 4 (Accounting department).

2)

Configure the VLAN membership. The figure below shows all different VLANs to be setup. Be sure to set all of them as shown below.

Page 57 of 58

Downloaded from

www.Manualslib.com

manuals search engine

3)

Setting up second VLAN group (Sales), VLAN ID = 02, with membership of ports 1~8, 25.

4)

Setting up third VLAN group (Marketing), VLAN ID = 03, with membership of ports 7~14, 25.

5)

Setting up fourth VLAN group (Accounting), VLAN ID = 04, with membership of ports 19~20, 25.

6)

Setting up first VLAN group (IT), VLAN ID = 01, with membership of all ports.

Since VLAN ID 01 has been setup by default, you will have to remove the ports that belong to all other VLAN group except port 25.

7)

Ports 7 and 8 are on both VLAN 02 and 03 because they connect to a file server and print server. Sales and Marketing departments can both

use these servers.

8)

Port 25 provides Gigabit speed for email server and Internet connection so each VLAN included port 25.

It is the uplink port, so each VLAN

must have it to communicate to the rest of the network.

The specific ports above have the following functions:

VLAN 1: Port 15 – Port 18, Port 21 – Port 24, Port 26, for IT department to monitor and control activities on all other VLANs

VLAN 2: Port 1 – Port 8, for Sales department, port 7 and 8 connect to file archives and printer server.

VLAN 3: Port 7 – Port 14, for Marketing department, port 7 and 8 connect to file archives and printer server.

VLAN 4: Port 19 – Port 20, for Accounting department, its work is kept secret from other departments except IT.

Scenarios:

If a packet comes in on port 2, it can go to ports 1, 3, 4, 5, 6, 7, 8, and 25, as those are the only ports in that VLAN.

A Sales person on Port 2 can

get to the Internet, send and receive email, but cannot access the accounting department print server or file archives.

If a Marketing user sends out a broadcast message, the sales and accounting departments will not be affected by the message, as it will not go out

on their ports. Only the marketing department and the IT group will get the broadcast message.

Page 58 of 58

Downloaded from

www.Manualslib.com

manuals search engine