Enterasys Networks manual Summary of Vlan Local Management, 802.1Q Vlan Screen Hierarchy

Page 26

Summary of VLAN Local Management

This process would be repeated on every switch that is connected in the network to ensure that each switch has a secure Management VLAN for switch management.

If the switch was connected to another switch via port 7, which was set as a 1Q Trunk port, then the management station connected to the Management VLAN port of either switch could manage both switches.

NOTE: The management stations at each switch must be on the same Management VLAN.

No matter how many switches are connected, a management station connected to any port on the same Management VLAN can be used to remotely manage any Enterasys Networks 802.1Q switch in the network as long as the Host Data Port of all the switches are members of the same Management VLAN.

3.2SUMMARY OF VLAN LOCAL MANAGEMENT

The VLAN configuration process is an extension of normal Local Management operations. A series of Local Management screens provides access to the functions and commands necessary to add, change, or delete VLANs and to assign ports to those VLANs.

A switch supporting 802.1Q VLANs provides the VLAN Configuration screens as a standard part of its Local Management hierarchy when the switch is configured to operate in 802.1Q Mode. The hierarchy of the Local Management screens pertaining to 802.1Q VLAN configuration is shown in Figure 3-3.

Figure 3-3 802.1Q VLAN Screen Hierarchy

802.1Q VLAN Configuration Menu

Device VLAN Configuration

Port Assignment Configuration

Port Filtering Configuration

VLAN Forwarding Configuration

Protocol VLAN Configuration

Protocol Ports Configuration

25994_03

3-4VLAN Configuration

Image 26
Contents 802.1Q Vlan User’s Guide Page Page Page Contents Iv Contents Figures Tables Using this Guide Structure of this GuideRelated Documents Document ConventionsVirtual Local Area Networks Defining VLANsTypes of VLANs Example of a VlanOther Vlan Strategies 1 802.1Q VLANsSecureFast VLANs Benefits and RestrictionsVlan Terms Vlan IDGeneric Attribute Registration Protocol Garp Getting Help Your email addressDescription Vlan ComponentsClassifying Frames to a Vlan Configuration ProcessDefining a Vlan Customizing the Vlan Forwarding ListVlan Switch Operation Inside the SwitchBroadcasts, Multicasts, and Unknown Unicasts Receiving Frames from Vlan PortsForwarding Decisions Garp Switch Operation Known UnicastsPage Managing the Switch Switch Without VLANsSwitch with VLANs Switch Management with Only Default VlanSwitch Management with VLANs Summary of Vlan Local Management 802.1Q Vlan Screen Hierarchy802.1Q Vlan Configuration Menu Screen When to UseMenu Definitions How to AccessScreen Example Device Vlan Configuration Screen Device Vlan Configuration Screen Field Definitions ToggleVlan Name lower part Changing the Vlan to FID Association Renaming a VlanDisabling VLANs Deleting a VlanEnabling VLANs Changing the Forwarding Mode Paging Through the Vlan ListPort Assignment Configuration Screen Port Assignment Configuration ScreenChanging the Port Mode Port ModeAssigning a Vlan ID Port Filtering Configuration Screen Paging Through the Port ListSee the names of the VLANs associated with the Vlan ID. If a Filter Using Vlan Displaying Vlan IDs Associated with a PortVlan Forwarding Configuration Screen Selecting the Type of Filtering for a PortPort Type Adding Forwarding List Entries Viewing Current Vlan PortsPaging Through Vlan Forwarding List Entries Deleting Forwarding List Entries Changing the Frame FormatProtocol Vlan Configuration Screen Protocol Vlan Configuration ScreenVlan ID Protocol Type Assigning a Protocol Family to a Vlan ID Ether type28VLAN Configuration Protocol Ports Configuration Screen Displaying the Protocol Types on Current Ports10 Protocol Ports Configuration Screen Adding/Deleting Ports Associated with a Vlan ID Delete ALL32VLAN Configuration Quick Vlan Walkthrough11 Walkthrough Stage One 12 Walkthrough Stage Two Test Vlan 14 Walkthrough Stage Four 15 Final Walkthrough Stage Page Example 1, Single Switch Operation ExamplesSolving the Problem Switch Configured for VLANsExample 2, VLANs Across Multiple Switches Frame HandlingExample 2, VLANs Across Multiple Switches Switch Bridge 1 Broadcasts Frames Transmitting to Switch Example 3, 1D Trunk Connection to 802.1Q Vlan Network Transmitting to BridgeExample 3, 1D Trunk Connection to 802.1Q Vlan Network Switch 4 is set as follows Frame Handling Switch 2 Forwards to 1Q Trunk 10 Switch 1 Forwards to 1D Trunk Example 4, Isolating Network Traffic According to Protocol 11 Example 4, Isolating Traffic According to Protocol 16Examples Example 4, Isolating Network Traffic According to Protocol 18Examples Index NumericsIndex-2 Index-3

802.1Q specifications

Enterasys Networks, a subsidiary of the Siemens Group, is widely recognized for its comprehensive networking solutions, with a strong emphasis on security, reliability, and performance. One of the key technologies offered by Enterasys is 802.1Q, a critical component of Ethernet networking that establishes standards for VLAN (Virtual Local Area Network) tagging. This technology is essential for enhancing network performance and managing traffic efficiently.

The primary feature of 802.1Q is its ability to create VLANs, which segment a physical network into multiple logical networks. This segmentation improves network security by isolating sensitive data and restricting access to specific users or devices. With VLANs, organizations can reduce broadcast traffic, thereby enhancing overall network efficiency. Different departments within an organization can operate on their own VLAN, ensuring that their traffic is kept separate from others.

One significant technological aspect of 802.1Q is its tagging method. When a frame passes through a switch port configured for IEEE 802.1Q, the switch appends a VLAN tag to the frame. This tag contains important information, such as the VLAN ID, enabling switches and devices throughout the network to identify which VLAN the frame belongs to. This tagging is especially critical in environments where multiple VLANs share the same physical infrastructure.

Another characteristic of Enterasys Networks' implementation of 802.1Q is interoperability with existing network standards and protocols. This means that organizations can implement VLAN tagging without requiring major upgrades or replacements of their switch hardware. Enterasys ensures that its switches are compliant with various industry standards, making it easier for enterprises to integrate these solutions into their existing network settings.

Security is another vital feature of Enterasys Networks’ 802.1Q offering. By leveraging VLANs, organizations can enforce stricter access controls and policies, reducing the risk of unauthorized access to sensitive network segments. This is particularly beneficial for industries with stringent compliance requirements, such as finance and healthcare.

In summary, Enterasys Networks' 802.1Q technology plays a pivotal role in modern networking by facilitating VLAN creation, enabling efficient traffic management, ensuring interoperability, and bolstering network security. As organizations increasingly rely on connected devices and data-driven processes, technologies like 802.1Q are essential for building robust, scalable, and secure networking environments.