Port Filter (Port-Based Vlan) - ZyXEL Communications IES-1000 User Manual

LABEL
Packet Filter Type
Apply
Reset
10.5

Port Filter (Port-based VLAN)

The IES-1000 port filter (or port-based VLAN) mechanism can be used to limit the broadcast domain to the
members of a port filter group only. In this way, the port filter increases network performance by limiting
broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all
broadcast frames go to each and every individual port.
The stations on a logical network belong to one group; however, a station can belong to more than one group.
Subscribers of one group are not allowed to access the resources of other groups and a higher level of security is
achieved. This isolates the subscribers from one another and prevents a subscriber from discovering the resources,
for example, shared drives or printers, of another subscriber.
In the IES-1000 port filter, the allowable outgoing port(s) of each incoming port must be defined. Ethernet frames
are forwarded according to these rules. Therefore, if you wish to allow two subscriber ports to talk to each other,
for example, between conference rooms in a hotel, you must define the egress port (outgoing port) for both ports.
An egress port is an outgoing port, that is, a port through which a data frame leaves. Port filters are specific only to
the switch on which they were created.
The factory default settings for the port-based filter of the IES-1000 are:
- Bridge port 1 (Ethernet port) allowed to all bridge ports
- Bridge port 2 (DSL port 1) allowed to bridge port 1 (Ethernet port) only
- Bridge port 3 (DSL port 2) allowed to bridge port 1 (Ethernet port) only
- Bridge port 4 (DSL port 3) allowed to bridge port 1 (Ethernet port) only
- Bridge port 5 (DSL port 4) allowed to bridge port 1 (Ethernet port) only
- Bridge port 6 (DSL port 5) allowed to bridge port 1 (Ethernet port) only
- Bridge port 7 (DSL port 6) allowed to bridge port 1 (Ethernet port) only
- Bridge port 8 (DSL port 7) allowed to bridge port 1 (Ethernet port) only
- Bridge port 9 (DSL port 8) allowed to bridge port 1 (Ethernet port) only
The default port filter settings allow each DSL port to communicate back and forth with only the Ethernet port,
and not with other DSL ports. The following figure illustrates this.
Getting Started Screens
Table 10-3 Bridge Packet Type Filter Setup
Choose Any or IP or PPPoE from the drop-down list. Choose Any to allow all kinds of
packets, IP to allow IP packets only or PPPoE to allow PPPoE packets only.
Click Apply to save your changes back to the IES-1000's volatile memory. The IES-1000
loses these changes if it is turned off or loses power, so use the Config Save link on the
navigation panel to the left to save your changes to the non-volatile memory when you
are done configuring.
Click Reset to begin configuring this screen afresh.
DESCRIPTION
IES-1000 User's Guide
10-5