V Cl - Black Box LPB2910A User Manual

2-­‐17 V CL
2-­‐17.1 M AC-­‐based V LAN
MAC address-­‐based VLAN decides the VLAN for forwarding an untagged frame based on the source
MAC a ddress o f t he f rame.
A common way of grouping VLAN members is by port; this is called port-­‐based VLAN. Typically, the
device adds the same VLAN tag to untagged packets that are received through the same port. Later
on, these packets can be forwarded in the same VLAN. Port-­‐based VLAN is easy to configure, and
applies to networks where the locations of terminal devices are relatively fixed. As mobile office and
wireless network access gain more popularity, the ports that terminal devices use to access the
networks are very often non-­‐fixed. A device may access a network through Port A this time, but
through Port B the next time. If Port A and Port B belong to different VLANs, the device will be
assigned to a different VLAN the next time it accesses the network. As a result, it will not be able to
use the resources in the old VLAN. On the other hand, if Port A and Port B belong to the same VLAN,
after t erminal d evices a ccess t he n etwork t hrough P ort B , t hey w ill h ave a ccess t o t he s ame r esources
as t hose a ccessing t he n etwork t hrough P ort A d o, w hich b rings s ecurity i ssues. T o p rovide u ser a ccess
and e nsure d ata s ecurity i n t he m eantime, t he M AC-­‐based V LAN t echnology w as d eveloped.
MAC-­‐based VLANs group VLAN members by MAC address. With MAC-­‐based VLAN configured, the
device a dds a V LAN t ag t o a n u ntagged f rame a ccording t o i ts s ource M AC a ddress. M AC-­‐based V LANs
are mostly used in conjunction with security technologies such as 802.1X to provide secure, flexible
network a ccess f or t erminal d evices.
Web I nterface
To c onfigure M AC a ddress-­‐based V LAN c onfiguration i n t he w eb i nterface:
1. Click V LC, M AC-­‐based V LAN c onfiguration, a nd a dd n ew e ntry.
2. Specify t he M AC a ddress a nd V LAN I D.
3. Click A pply.
Figure 2 -­‐17.1: The M AC-­‐based V LAN M embership C onfiguration
Parameter d escription:
Delete:

To d elete a M AC-­‐based V LAN e ntry, c heck t his b ox a nd p ress s ave. T he e ntry w ill b e d eleted o n t he
selected s witch i n t he s tack.
MAC A ddress:

Indicates t he M AC a ddress.
VLAN I D:

155
Publication date: Sept, 2015
Revision A1