Allied Telesis 2.6.1 manual Vlan Tagging, Tpid

Page 73

Layer 2 Switching

73

Devices that are members of the same VLAN only exchange data with each other through the switch’s switching capabilities. To exchange data between devices in separate VLANs, the switch’s routing capabilities are used. The switch passes VLAN status information, indicating whether a VLAN is up or down, to the Internet Protocol (IP) module. IP uses this information to determine route availability.

The switch has a maximum of 255 VLANs, ranging from a VLAN identifier (VID) of 1 to 4094. When the switch is first powered up, a “default” VLAN is created and all ports are added to it. In this initial unconfigured state, the switch will broadcast all the packets it receives to the default VLAN. This VLAN has a VID of 1 and an interface name of vlan1. It cannot be deleted, and ports can only be removed from it if they also belong to at least one other VLAN. The default VLAN cannot be added to any STP, but always belongs to the default STP. If all the devices on the physical LAN are to belong to the same logical LAN, that is, the same broadcast domain, then the default settings will be acceptable, and no additional VLAN configuration is required.

VLAN Tagging

An Ethernet packet can contain a VLAN tag, with fields that specify VLAN membership and user priority. The VLAN tag is described in IEEE Standard 802.3ac, and is four octets that can be inserted between the Source Address and the Type/Length fields in the Ethernet packet (Figure 13 on page 74). To accommodate the tag, Standard 802.3ac also increased the maximum allowable length for an Ethernet frame to 1522 octets (the minimum size is 64 octets). IEEE Standard 802.1Q specifies how the data in the VLAN tag is used to switch frames. VLAN-aware devices are able to add the VLAN tag to the packet header. VLAN-unaware devices cannot set or read the VLAN tag.

Table 10 on page 73 lists the meaning and use of the fields in the Ethernet frame. Figure 13 on page 74 shows the format of VLAN data in an Ethernet frame. Twelve bits of the tag are the VLAN Identifier (VID), which indicates the VLAN that the packet belongs to. Table 11 on page 74 lists the VLAN Identifier values that have specific meaning.

Table 10: Fields in the Ethernet frame for QoS and VLAN switching.

Field

Length

Meaning and use

 

 

 

TPID

2 octets

The Tag Protocol Identifier (TPID) is defined by IEEE Standard

 

 

802.1Q as 0x81-00.

 

 

 

User Priority

3 bits

The User Priority field is the priority tag for the frame, which

 

 

can be used by the switch to determine the Quality of

 

 

Service to apply to the frame. The three bit binary number

 

 

represents eight priority levels, 0 to 7.

 

 

 

CFI

1 bit

The Canonical Format Indicator (CFI flag) is used to indicate

 

 

whether all MAC address information that may be present

 

 

in the MAC data carried by the frame is in canonical format.

 

 

 

VID

12 bits

The VLAN Identifier (VID) field uniquely identifies the VLAN

 

 

to which the frame belongs.

 

 

 

Software Release 2.6.1 C613-02039-00 REV A

Image 73
Contents AT-8800 Series Switch Page Contents AT-8800 Series Switch User Guide Operating the switchMaintenance and Troubleshooting Page Why Read this User Guide? Introducing the AT-8800 Series SwitchChapter AT-8800 Series Switch Documentation Set Where To Find More InformationOnline Technical Support Features of the AT-8800 Series SwitchIntroduction Software Features Management FeaturesSpecial Feature Licences Do if You Clear Flash Memory Completely on This Chapter Getting Started with the Command Line Interface CLITerminal Communication Parameters Connecting a Terminal or PCParameters for terminal communication Value Getting Started with the Command Line Interface CLI Enter the password at the password promptLogging Assigning an IP AddressTo change the IP address for an interface, enter the command Setting RoutesChoosing a Password Changing a PasswordTo add a static route, enter the command Not available Using the CommandsTo display the current help file, enter the command Getting Command Line HelpAliases Setting System Parameters Enabling Special Feature LicencesGetting Started with the Graphical User Interface GUI Getting Started with the Graphical User Interface GUIAccessing the Switch via the GUI What is the GUI?Browser and PC Setup Supported browsers and operating systemsHttp Proxy Servers See Option 3 Connecting to an Installed Switch on Establishing a Connection to the SwitchSee Option 1 Configuring the Switch before Installation on See Option 2 Installing the Switch into the LAN onUse this procedure if Option 1 Configuring the Switch before InstallationSee Http Proxy Servers on page 23 for more information Default username is manager Option 2 Installing the Switch into the LANAt the login prompt, enter the user name and password Plug the switch into the LANAssign the vlan1 interface an IP address See Secure Access on page 29 for more informationFind out the IP address of the switch’s interface Option 3 Connecting to an Installed SwitchSelect a PC If necessary, bypass the Http proxy serverCreate a Security Officer user account Secure AccessTo enable system security, use the command Then enter the password for CIPHER, sbr4y3To create an RSA key pair, use the command System Status System StatusConfiguration Menu Using the GUI Navigation and FeaturesUsing Configuration Pages Quality of Service and traffic filtersAn example of a configuration page with a selection table Editable Fields Monitoring Menu Management MenuChanging the Password Diagnostics MenuContext Sensitive GUI Help Combining GUI and CLI Configuration Saving Configuration Entered with the GUIConfiguring Multiple Devices Then delete the GUI resource file, using the command To upgrade the GUILoad the new file onto the switch Upgrading the GUIInstall the new file as the preferred GUI TroubleshootingPoint your web browser at the switch’s IP address Deleting Temporary Files Accessing the Switch via the GUITraffic Flow Solutions SolutionIP Addresses and Dhcp Time and NTPLoading Software Page User Accounts and Privileges Using Scripts onSnmp and MIBs on A Security Officer prompt looks likeLogin To display the current operating mode, enter the command Normal Mode and Security ModeOperating the switch Specific Parameters Storing Files in Flash Memory Remote ManagementExample output from the Show File command Using ScriptsStoring Multiple Scripts Saving the Switch’s ConfigurationFile Naming Conventions Loading and Uploading FilesFile extensions and file types Extension File type/function SPA Loading FilesExample Load a Patch File Using Http Setting Loader DefaultsTo load a patch file Configure the Loader Download the patch fileExample Upload a Configuration File Using Tftp Uploading Files From the SwitchMore information To upload a log fileUpgrading Switch Software To upgrade to a new software release Example Upgrade to a New Software Release UsingLoad the new release file onto the switch Make the release the default permanent release Enter the licence password for the software releaseEnter licence information for the release Test the releaseTo upgrade to a new patch file Example Upgrade to a new patch fileCheck that the file is successfully loaded Snmp and MIBs Using the Built-in EditorFor More About Operations and Facilities Where interface is the name of an interface, such as vlan11AT-8800 Series Switch User Guide Enabling and Disabling Switch Ports Switch PortsTo display information about switch ports, use the command To enable or disable a switch port, use the commandsSTP Autonegotiation of Port Speed and Duplex Mode Speed 10/100 Port TrunkingShow VLAN=ALL Packet Storm Protection Layer 2 Switching Port Mirroring Port security Virtual Local Area Networks VLANs Example output from the Show Switch Port Intrusion commandTpid Vlan TaggingFormat of user priority and Vlan data in an Ethernet frame Vlan Membership using Vlan Tags Vlan Membership of Untagged Packets Vlan membership of example of a network using tagged portsMember ports Vlans with untagged ports Creating VLANsTo destroy a VLAN, use the command To add tagged ports to a VLAN, use the commandProtected VLANs Summary of Vlan tagging rulesVlan Interaction with STPs and Trunk Groups Generic Vlan Registration Protocol Gvrp Layer 2 Switching ProcessIngress Rules Learning Process Forwarding Process Layer 2 Filtering Example output from the Show Switch Filter command Egress Rules Quality of ServiceSpanning Tree Modes Spanning Tree Protocol STPSpanning tree port states State Meaning Spanning Tree and Rapid Spanning Tree Port StatesRapid Spanning Tree port states State Meaning Configuring STP SET STP=stpnameALL PRIORITY=0..65535 Example output from the Show STP command Do not occur Parameter Meaning Switch Max AgeTo display STP port information, use the command Example output from the Show STP Port command 94AT-8800 Series Switch User GuideTo show STP counters, use the command Receive 96AT-8800 Series Switch User GuideTransmit DiscardedIgmp Snooping Interfaces to Layer 3 ProtocolsDisable Igmpsnooping Group List Example output from the Show IP Igmp commandEvent TriggersDescription ParametersLayer Displays the interfaces enabled for IP routing Figure Then use either of the following commandsInternet Protocol IP IP MulticastingNovell IPX Routing Information Protocol RIPLayer 103 AppleTalk Example output from the Show IPX Circuit commandLayer 105 Resource Reservation Protocol RsvpPage Maintenance and Troubleshooting Switch startup messages How the Switch Starts UpSet system territory How to Avoid ProblemsWatch for software updates If you accidentally do this, you will need to What to Do if You Clear Flash Memory CompletelyWhat to Do if the PPP Link Disconnects Regularly What to Do if Passwords are LostGetting the Most Out of Technical Support Checking Connections Using Ping Resetting Switch DefaultsTo get debugging output, enter the command Maintenance and Troubleshooting 113To set Ping defaults, enter the command Troubleshooting IP ConfigurationsStop a Ping that is in progress, enter the command Telnet FailsYour switch is acting as a Dhcp client Troubleshooting Dhcp IP AddressesYour switch is acting as a Dhcp server Maintenance and Troubleshooting 115To check that the PPP link is active, enter the command Troubleshooting IPX ConfigurationsLocal Workstations Can Not Access Remote Servers No Routes are Visible to the Remote RouterCheck route tables Using Trace Route for IP TrafficTo halt a trace route that is in progress, enter the command