Page 21 of 21

o

Packets leaving the switch will be either tagged or untagged depending on the setting for that port’s

VLAN membership properties.

A ‘U’ for a given port means that packets leaving the switch from that port will be Untagged.

Inversely, a ‘T’ for a given port means that packets leaving the switch from that port will be tagged

with the respective VLAN ID in which it participated in.

The example given in this section will step through a more elaborate setup illustrating all possible scenarios

for a comprehensive understanding of tagged VLANs.

Example

This example demonstrates several scenarios of VLAN use and how the switch will handle Tagged and

Untagged traffic.

Please see the following figure for detail setting.

1) Setup the following VLANs: VLAN 10, 20.

2)

Configure the VLAN membership. Be sure to set all of them as follows.

o

Setting up first VLAN group, VLAN ID = 10:

o

Setting up second VLAN group, VLAN ID = 20:

3)

Modify PVID Setting to apply previous two VLAN groups:

Modify Default VLAN group (VLAN ID = 1) to apply two new VLAN groups:

The specific ports above have the following Port VLAN ID settings:

Default VLAN: Port 7 – Port 26 (all U),

VID = 1

VLAN 1: Port 1 (U), Port 2 (U), Port 3 (T),

VID = 10

VLAN 2: Port 4 (U), Port 5 (T), Port 6 (U),

VID = 20.

4) The following scenarios will produce results as described below:

(1). If an untagged packet enters Port 1, the switch will tag it with a VLAN tag value 10. The packet

will have access to Port 2 and Port 3. The outgoing packet will be stripped away its tag becoming

an untagged packet as it leaves Port 2. For Port 3, the outgoing packet will leave as a tagged

packet with a VLAN tag value 10.

(2). If a tagged packet with a VLAN tag value 10 enters Port 3, the packet will have access to Port 1

and Port 2. If the packet leaves Port 1 and/or Port 2, it will be stripped away its tag becoming an

untagged packet as it leaves switch.

(3). If an untagged packet enters Port 4, switch will tag it with a VLAN tag value 20. The packet will

have access to Port 5 and Port 6. The outgoing packet will be stripped away its tag becoming an

untagged packet as it leaves Port 6. For Port 5, the outgoing packet will leave as a tagged packet

with a VLAN tag value 20.

Downloaded from

www.Manualslib.com

manuals search engine

Page 22 of 22

APPENDIX C: Port-based VLAN

Port-based VLAN will help efficiently confine the broadcast traffic to the switch ports. This switch allows up

to 26 port-based VLAN groups, any one port can belong to different VLAN groups. The default VLAN group

port-based VLAN that have all ports belonging to VLAN 1.

Port-based VLANs

Packets received by the switch will be treated in the following way:

o

When a packet enters a port, it only can proceed to the VLAN which the port belongs to. The packet

will be able to be sent to other ports with the same VLAN ID membership.

o

If the port in which the packet entered does not have membership with the same VLAN as the

source port does, the packet will be dropped.

Example

This example basically demonstrates how the port-based VLANs work to meet your needs.

Setup the following VLANs, each with defined descriptions:

VLAN 1 (IT department)

VLAN 2 (Sales department)

VLAN 3 (Marketing department)

VLAN 4 (Accounting department).

Configure the VLAN membership. Be sure to set all of them as follows.

±

Setting up second VLAN group (Sales), VLAN ID = 02, with membership of ports 1~8, 25.

±

Setting up third VLAN group (Marketing), VLAN ID = 03, with membership of ports 7~14, 25.

±

Setting up fourth VLAN group (Accounting), VLAN ID = 04, with membership of ports 19~20, 25.

±

Setting up first VLAN group (IT), VLAN ID = 01, with membership of all ports.

Since VLAN ID 01 has been setup by default, you will have to remove the ports that belong to all other

VLAN group except port 25.

±

Ports 7 and 8 are kept for the usage of connecting file server and printer server. Sales and Marketing

departments can share file archives and printing services.

±

Port 25 provides Gigabit speed for email server and Internet connection.

The specific ports above have the following functions:

VLAN 1: Port 15 – Port 18, Port 21 – Port 24, Port 26, for IT department to monitor and control activities on

all other VLANs

VLAN 2: Port 1 – Port 8, for Sales department, port 7 and 8 connect to file archives and printer server.

VLAN 3: Port 7 – Port 14, for Marketing department, port 7 and 8 connect to file archives and printer server.

VLAN 4: Port 19 – Port 20, for Accounting department, its work is kept secret from other departments

except IT.

Scenarios:

If a packet comes in on port 2, it can go to ports 1, 3, 4, 5, 6, 7, 8, and 25, as those are the only ports in

that VLAN. A Sales person on Port 2 can get to the Internet, send and receive email, but cannot access the

marketing department print server or file archives.

Downloaded from

www.Manualslib.com

manuals search engine

Page 23 of 23

If a Marketing user sends out a broadcast message, the Sales and Accounting departments will not be

affected by the message, as it will not go out on their ports. Only the Marketing department and the IT

group will get the broadcast message.

If an IT user sends out a broadcast message, everyone will get it.

Downloaded from

www.Manualslib.com

manuals search engine