Application Example 1
Page 24-2

Application Example 1

VLANs Based on Logical Policies

Example 1 shows a network organized logically. The network is organized according to IP
networks, but this organization is achieved through the application of logical policies rather
than physical segmentation. The use of logical policies provides the flexibility of moving IP
users from segment to segment and preserving their original VLAN membership – without
reconfiguring AutoTracker or the workstations.
Group and VLAN Membership
The network shown in Example 1 contains one Group – Group 2 – that consists of ports 1, 2,
3, and 4. Note that a Group defines a physical area – a set of ports – within the network.
When VLANs with logical policies are created within a Group, the logical policies are applied
to traffic received from all ports within the Group – but not to traffic from ports outside the
Group – to determine if any source device should be a VLAN member.
As shown on the facing page, two VLANs were created within Group 2, each with a logically-
based Network Address policy. The Network Address policy for VLAN A defines IP network
125.0.0.0 and the Network Address policy for VLAN B defines IP network 130.0.0.0. All traffic
received on ports 1, 2, 3, and 4 will be checked for possible membership in these two VLANs.
Routing was enabled on both VLAN A and VLAN B so that traffic can move between the two
VLANs, as is shown in this example by the presence of the internal IP router.
Benefits
This network configuration shown in this example provides flexibility. As explained on the
following page, this logical network organization enables the Network Manager to move IP
users between segments while preserving their original VLAN membership – without reconfig-
uring AutoTracker or the workstations.