IES-1000 User’s Guide

ip

=

The filter allows IP packets only to be forwarded to and from the specified port.

pppoe

=

The filter allows PPPoE packets only to be forwarded to and from the specified port.

The Ethernet type filter controls which types of packets to forward to individual ports. Use ether type without the port number and packet type to display the Ethernet type filter settings.

9.6Port-Based VLAN Commands

The IES-1000 VLAN (Virtual Local Area Network) mechanism can be used to limit the broadcast domain to the members of a VLAN group only. In this way, VLAN increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all broadcast frames go to each and every individual port.

The stations on a logical network belong to one group; however, a station can belong to more than one group. Subscribers of one group are not allowed to access the resources of other groups and a higher level of security is achieved. This isolates the subscribers from one another and prevents a subscriber from discovering the resources, for example, shared drives or printers, of another subscriber.

In the IES-1000 port-based VLAN, the allowable outgoing port(s) of each incoming port must be defined. Ethernet frames are forwarded according to these rules. Therefore, if you wish to allow two subscriber ports to talk to each other, for example, between conference rooms in a hotel, you must define the egress port (outgoing port) for both ports. An egress port is an outgoing port, that is, a port through which a data frame leaves. Port- based VLANs are specific only to the switch on which they were created.

The factory default settings for the port-based VLAN of the IES-1000 are:

-Bridge port 1 (Ethernet port) allowed to all bridge ports

-Bridge port 2 (DSL port 1) allowed to bridge port 1 (Ethernet port) only

-Bridge port 3 (DSL port 2) allowed to bridge port 1 (Ethernet port) only

-Bridge port 4 (DSL port 3) allowed to bridge port 1 (Ethernet port) only

-Bridge port 5 (DSL port 4) allowed to bridge port 1 (Ethernet port) only

-Bridge port 6 (DSL port 5) allowed to bridge port 1 (Ethernet port) only

-Bridge port 7 (DSL port 6) allowed to bridge port 1 (Ethernet port) only

-Bridge port 8 (DSL port 7) allowed to bridge port 1 (Ethernet port) only

-Bridge port 9 (DSL port 8) allowed to bridge port 1 (Ethernet port) only

The default VLAN settings allow each DSL port to communicate back and forth with only the Ethernet port, and not with other DSL ports. The following figure illustrates this.

9-6

Bridge Commands