3Com 4.2.2 manual Stand-alone NT based Vlan Server

Configuring Policy-based VLAN Auto-configuration 4-25

auto-configuration can be extended to include protocol-based VLAN auto-configuration and application-based VLAN auto-configuration.

Automatic One of the most important considerations in automatic VLAN

Configuration of configuration is network security. Network administrators must have VLANs and Network complete control over how known users access and use the network. In

Security addition to this, administrators must also have complete control over who accesses the network and the times and locations where the network was accessed from. Network intrusions must be detectable and dealt with automatically.

When devices are setup for auto configuration based on a policy, all unused ports, or ports whose link status is down, are automatically placed in the default VLAN. The ports are moved out of the default VLAN only when a recognized endstation or user connects to a port. This ensures that unknown users do not have access to all VLANs in the network. The default VLAN can be secured by not enabling any network services within this VLAN, as well as not as connecting the default VLAN to the rest of the routed network.

VLAN Server and The VLAN server is a parameter database or repository that holds the Automatic VLAN VLAN mapping information. The VLAN Server is an important component

Configuration of the VLAN auto-configuration system. Devices that support VLAN auto-configuration query the VLAN Server to resolve the VLAN mapping information based on a pre-defined policy or criteria. For example: Devices that enforce the MAC address based automatic VLAN configuration policy query the VLAN server to resolve MAC address to VLAN mapping. The VLAN Server may contain VLAN mapping information based on MAC address, IP subnet, Protocol type etc., depending on what policies are enforced on the network

There are two types of VLAN servers currently implemented:

1Stand-alone NT based VLAN Server.

2Integrated TEM/Unix or TEM/NT based VLAN server.

Stand-alone NT based VLAN Server.

This server is used by SuperStack II Switch1000/3000 and Desktop switches when configured in AutoSelect Mode, to execute automatic VLAN configuration based on MAC addresses. See the description of AutoSelect Mode VLAN configuration.