ZyXEL Communications VES-1616 manual Case

Page 26

ZyXEL

VES-1616/24FA-5x Series Support Notes

known as the VLAN Group. A station can belong to more than one group. Stations in the same VLAN group can communicate with each other. With VLAN, a station cannot directly communicate with stations that are not in the same VLAN group(s); the traffic must first go through a router.

In GePON applications, VLAN is vital in providing isolation and security among subscribers. When properly configured, VLAN prevents one subscriber from accessing the network resources of another on the same LAN. Thus a user will not see the printers and hard disks of another user in the same building.

VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. A VLAN group is a broadcast domain. In traditional Layer-2 switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain.

There are two VLAN implementations: Port-based VLAN and IEEE 802.1q Tagged VLAN. VES-1616F-3X supports both VLAN implementations. The major difference between both VLAN implementations is that Tagged VLAN can cross Layer-2 switches but Port-based VLAN cannot.

Port-based VLAN

Port-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. You must define outgoing ports allowed for each port when using port-based VLANs. Note that VLAN only governs the outgoing traffic. In the other word, it is unidirectional.

Therefore, if you wish to allow two subscriber ports to talk to each other, e.g., between conference rooms in a hotel, you must define the egress (outgoing port) for both ports. An egress port is an outgoing port, that is, a port through which a data packet leaves.

In the following figure, five hosts (A, B, C, D and E) are connected to a 5-port layer-2 switch which supported port-based VLAN.

Case 1:

Hosts A and B can communicate with each other, because they are in the same VLAN group. But Hosts A and B cannot communicate with Hosts C, D, and E.

All contents copyright 2008 ZyXEL Communications Corporation.

25

Image 26
Contents VES-1616/24FA-5x Series Vdsl Switch ZyXEL VES-1616/24FA-5x Series Support Notes Classifier & Policy rule setup on your Switch Switch Management and Maintenance Firmware UpgradeRestore a Configuration File ZyXEL Backing Up a Configuration File Load Factory Defaults General Networking Dhcp Relay Option 82 ApplicationSwitch settings Network Port Dhcp Server Dhcp ClientIP Commander setup ZyXEL ZyXEL ZyXEL Enter a name and description for the new rule ZyXEL Next select Dhcp Option in the Keywords field An Add Dhcp Option Rule screen displays ZyXEL Click Next in the screen that displays ZyXEL ZyXEL You can choose to enable Ddns service on the Dhcp server Click Finish to complete the rule creation Separating a physical network into multiple Virtual networks Case Port-based Vlan definition Port-based Vlan across multiple switches ZyXEL PC Z ZyXEL ZyXEL Configuring the Switch Using the CLI Tag-based Vlan Overview ZyXEL Ingress Process Forwarding ProcessVID Vlan ID Egress Process VEES-1616/24FA-5x Series Support Notes Answer ZyXEL Configuration screen for switch 2 is shown as follows ZyXEL ZyXEL Vlan Stacking Overview Company XX branch Company YY branchSwitch C Switch aSwitch B Switch DSwitch H ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL Network Scenario ZyXEL ZyXEL ZyXEL ZyXEL IP Multicasting Configuring Igmp snooping in your switch IgmpCPE ZyXEL Overview of MVR Dynamic Mode Leave Operation Compatible modeJoin Operation Immediate Leave OperationConfiguration via Web ZyXEL ZyXEL ZyXEL ZyXEL Setting, and activate the Igmp Snooping VES-1616FA-54config# vlanVES-1616FA-54config-vlan# fixed VES-1616FA-54config#igmpsnoopingTriple play Application Vlan IDZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL ZyXEL Vlan ID ZyXEL ZyXEL ZyXEL Broadcast storm Filtering Database Instability Select a root bridge Select a designated port on each segment ZyXEL Switching security MAC Limit ZyXEL Setting up 802.1x Radius Authentication ZyXEL ZyXEL ZyXEL Classifier & Policy rule setup on your Switch ZyXEL ZyXEL Centralized Management Introduction to SNMPc and NetAtlas System Architecture EMS Overview Adding a new device in SNMPc Map Object Properties Read/Write Access Mode Read/write Community Device Selection Rootmap FAQ ZyXEL Using the Web Configurator ZyXEL