Allied Telesis AT-9000/28SP, AT-9000/52 manual Port-based VLANs Tagged VLANs, Port Vlan Identifier

Page 128

Chapter 11: Setting Port-based and Tagged VLANs

Overview

Port-based

VLANs

Tagged VLANs

A VLAN is a group of ports that form a logical Ethernet segment on an Ethernet switch. The ports of a VLAN form an independent traffic domain in which the traffic generated by the nodes remains within the VLAN.

VLANs let you segment your network through the switch’s management software so that you can group nodes with related functions into their own separate, logical LAN segments. These VLAN groupings can be based on similar data needs or security requirements. For example, you could create separate VLANs for the different departments in your company, such as one for Sales and another for Accounting. Both port-based and tagged VLANs are supported in the web interface.

A port-based VLAN is a group of ports on a Gigabit Ethernet Switch that form a logical Ethernet segment. Each port of a port-based VLAN can belong to only one VLAN at a time. A port-based VLAN can have as many or as few ports as needed. The VLAN can consist of all the ports on an Ethernet switch, or just a few ports. In addition, a port-based VLAN can span switches and consist of ports from multiple Ethernet switches.

Ports in a port-based VLAN are referred to as untagged ports and the frames received on the ports as untagged frames. The names derive from the fact that the frames received on a port do not contain any information that indicates VLAN membership, and that VLAN membership is determined solely by a port’s PVID.

Port VLAN Identifier

Each port in a port-based VLAN must have a port VLAN identifier (PVID). The switch associates a frame to a port-based VLAN by the PVID assigned to a port on which a frame is received, and forwards a frame only to those ports with the same PVID. Consequently, all ports of a port-based VLAN must have the same PVID. In addition, the PVID of the ports in

a VLAN must match the VLAN’s VID.

For example, if you create a port-based VLAN on the switch and assign it the VID 5, the PVID for each port in the VLAN needs to be assigned the value of 5.

The second type of VLAN is the tagged VLAN. VLAN membership in a tagged VLAN is determined by information within the frames that are received on a port. This differs from a port-based VLAN, where the PVIDs assigned to the ports determine VLAN membership.

128

Image 128
Contents Web Browser User’s Guide Copyright Page Page Contents 100 137 207 Figures Figures Preface Document Conventions Downloading Management Software and Web-based Guides Management Software Updates Contacting Allied TelesisAlliedWare Plus Version 2.1.2 Web Browser Interface ChapterManagement Sessions Web Manager Accounts AlliedWare Plus Version 2.1.2 Web Browser Interface Starting a Management Session Starting a Web Management Session Awplus# configure terminal Awplusconfig# http server Login Page is displayed. See Figure Page Starting a Management Session Page Selecting items from a Web What to Configure First Assigning a Name to the SwitchSetting System Time Adding a Management IP AddressSaving Your Changes Ending a Web Management Session Starting a Management Session Basic Switch Parameters Setting the System Date and Time Setting System Time Manually Click Apply Setting An Sntp or NTP Server Select the Network Time Settings tabBasic Switch Parameters Page Setting a Telnet or SSH Server System Services page is displayed. See Figure Setting a Remote Log Server Setting the Switch Information System Contact InformationBasic Switch Parameters Setting the Configuration File Displaying Setting the Active Configuration FileUploading a Configuration File Managing User Accounts User ManagementChanging a User Password Click Add UserClick Set Password Changing the User Privilege Click Delete User Rebooting a Switch Upgrading the Software Basic Switch Parameters Page Displaying System Information Page Basic Switch Parameters Setting Port Parameters Displaying the Port Parameters Web Port Numbering CLI Port NumberingPort Configuration Setting Port Parameters Page Changing the Port Settings Page Setting Port Parameters Page Displaying the Storm Control Settings Page Modifying the Storm Control Settings Storm Control SettingsPage Setting Port Parameters Setting Port Statistics Displaying Port Statistics Displaying Transmit Receive Port StatisticsDisplaying the Receive Statistics Setting Port Statistics Displaying Transmit Statistics Setting Port Statistics Displaying Interface Statistics Setting Port Statistics Clearing Port Statistics Setting Port Statistics Setting Port Mirroring Overview Displaying Port Mirroring Settings Setting Port Mirroring Assigning a Destination Port Assigning Port Mirroring Values Page Setting Port Mirroring Setting the Port Spanning Tree Protocol Overview Displaying Port Spanning Tree Protocol Settings Setting the Port Spanning Tree Protocol Modifying Port Spanning Tree Protocol Settings Auto Setting the MAC Address Displaying the MAC Address Displaying Unicast MAC AddressesDisplaying Multicast Addresses Setting the MAC Address Assigning a MAC Address Assigning an Unicast AddressAssigning a Multicast Address Multicast Mac Address101 Deleting a Unicast Address Deleting a MAC AddressDeleting a Multicast Address 103 Setting the MAC Address 104 Setting Lacp 106 Displaying Lacp Trunks Lacp Trunks108 Adding an Lacp Trunk Add Lacp Trunk110 Modifying an Lacp Trunk Modify Lacp Trunk112 Deleting an Lacp Trunk Setting Lacp 114 Setting Static Port Trunks 116 Displaying Static Trunk Settings Static Trunks118 Adding Static Trunks Add Static Trunk page is displayed. See Figure 121 Modifying the Static Trunk Settings Modify Static Trunk page is displayed. See Figure 124 Deleting Static Trunks Setting Static Port Trunks 126 Setting Port-based and Tagged VLANs Port-based VLANs Tagged VLANs Port Vlan IdentifierTagged and Untagged Ports Displaying VLANs 131 Adding an Vlan 133 Modifying VLANs 135 Deleting VLANs Setting Switch Spanning Tree Protocols 138 Displaying Switch Spanning Tree Protocol Settings Increment Bridge Priority 141 Modifying Switch Spanning Tree Protocol Settings Increment Bridge Priority 28672 61440 Setting Switch Spanning Tree Protocols 144 Setting Internet Group Management Protocol Igmp Snooping Setting Internet Group Management Protocol Igmp Snooping Displaying and Modifying Igmp Snooping Configuration 148 Clearing the Routers List 150 Disabling Igmp Snooping Displaying the Routers List Displaying the Hosts List 154 Setting MAC Address-based Port Security Static Versus Dynamic Addresses Intrusion Actions 157 Displaying the MAC Address-based Port Security Settings Port. This is the default setting Modifying the MAC Address-based Port Security Settings Modify MAC Based Port Security161 Disabling MAC Address-based Port Security Settings Setting Radius and TACACS+ Clients Remote Manager Accounts Configuring TACACS+ RadiusSelecting the Authentication Method 167 Server Configuring the Authentication ServerConfiguring a 169 Configuring a Radius Server Authentication Server Configuration Page with Radius TabRadius Server Configuration 172 Deleting an Authentication Server Setting Radius and TACACS+ Clients 174 Setting 802.1x Port-based Network Access 176 Enabling 802.1x Port-based Authentication on the Switch Configuring 802.1x Port-based Authentication Modify 802.1x Authentication Page Expanded Timeouts Same VID as the supplicant who initially Mode requires that all clients log on Displaying the 802.1x Authentication Port Settings 1x ViewDisabling 802.1x Port-based Authentication on the Switch Disabling 802.1x Port-based Authentication on a Port Setting 802.1x Port-based Network Access 186 Setting IPv4 and IPv6 Management Feature Description Supported by IPv4 Address IPv6 Address IP Management Guidelines Assigning an IPv4 Address Assigning a Static IPv4 Address191 Assigning an Dhcp IPv4 Address 193 Assigning an IPv6 Address 195 Displaying IP Addresses Deleting an IPv4 Static Address Deleting IP AddressesDeleting an Dhcp IPv4 Address Deleting an IPv6 Address Setting Lldp and LLDP-MED 200 Setting Lldp Locations Creating a Civic LocationLldp Civic Location Click Add Following fields are displayed Lldp Civic Location Page- Modify Creating a Coordinate Location 206 Creating an Elin Location Lldp Elin Location 209 Configuring Lldp and LLDP-MED Setting the BasicLldp Configuration page is displayed. See Figure Setting Lldp Port Assignments Lldp Port Config page is displayed. See Figure Assigning Port Locations 215 Enabling Lldp TLV Lldp TLV Click Edit next to the port that you want to modify Modify Lldp TLV page is displayed. See Figure AAAA03 Epsr Enabling Lldp MED TLVModify Lldp Med TLV 222 Displaying Lldp Neighbor Information 224 Displaying Lldp Statistics Lldp Statistics Page with Summary Tab 227 Displaying Lldp Locations Displaying Civic LocationsDisplaying Coordinate Locations Displaying Elin Locations 231 Displaying Lldp and LLDP-MED Settings Displaying Basic Lldp ConfigurationDisplaying Lldp Port Assignments Displaying Port Locations Displaying Lldp TLV 235 Displaying LLDP-MED TLV237 Disabling Lldp on the Switch Setting sFlow Packet Counters Ingress Packet SamplesSFlow Collectors Guidelines Enabling sFlow on the Switch From the Discovery & Monitoring tab, select sFlowConfiguring sFlow on a Port SFlow Port Modify244 Specifying an sFlow Collector Sflow Page with Collectors Tab Click AddSflow Collector page is displayed. See Figure Displaying the sFlow Settings End of Document
Related manuals
Manual 50 pages 11.24 Kb

AT-9000/52, AT-9000/28SP, AT-9000/28 specifications

The Allied Telesis AT-9000/28 is a versatile and robust network switch designed for organizations seeking to enhance their networking capability. This Layer 2 managed switch delivers a high degree of performance and reliability, making it an ideal choice for businesses that require a seamless network experience.

One of the main features of the AT-9000/28 is its 28 ports, which include 24 Fast Ethernet ports and 4 Gigabit Ethernet uplink ports. This allows for flexible network configuration and scalability, accommodating both wired and wireless devices efficiently. The switch also supports auto-negotiation and auto-MDI/MDI-X, which simplifies installation and connectivity by automatically detecting and configuring the appropriate settings.

The AT-9000/28 employs advanced switching technologies, such as IEEE 802.1Q VLAN tagging, which enables the segregation of traffic for improved security and performance. This feature is crucial for businesses that require data isolation between different departments or user groups. In addition, the switch supports quality of service (QoS) protocols, allowing for traffic prioritization. This is particularly beneficial for organizations that handle multimedia applications or VoIP services that demand reliable bandwidth.

Another significant characteristic of the AT-9000/28 is its support for port mirroring. This capability is essential for network monitoring and troubleshooting, as it allows administrators to track and analyze network traffic efficiently. Furthermore, the switch supports multiple user authentication methods, including RADIUS and TACACS+, thus enhancing network security.

The AT-9000/28 is built with energy efficiency in mind, featuring Energy Efficient Ethernet (EEE) technology. This reduces power consumption during periods of low traffic without compromising performance, which aids in lowering overall operational costs.

In terms of management, the AT-9000/28 offers versatile management options, including a web-based GUI, Command Line Interface (CLI), and SNMP support. This flexibility enables network administrators to configure, monitor, and troubleshoot the switch easily.

Overall, the Allied Telesis AT-9000/28 is a reliable switch well-suited for a variety of network environments. Its combination of performance, security features, and energy efficiency makes it an excellent choice for organizations looking to optimize their network infrastructure. With robust capabilities and advanced technologies, the AT-9000/28 stands out as a valuable addition to any networking setup.