Vlan - Siemens SIMATIC NET SCALANCE S615 Configuration Manual

2.2

VLAN

2.2.1 VLAN
Network definition regardless of the spatial location of the nodes
VLAN (Virtual Local Area Network) divides a physical network into several logical networks
that are shielded from each other. Here, devices are grouped together to form logical groups.
Only nodes of the same VLAN can address each other. Since multicast and broadcast
frames are only forwarded within the particular VLAN, they are also known as broadcast
domains.
The particular advantage of VLANs is the reduced network load for the nodes and network
segments of other VLANs.
To identify which packet belongs to which VLAN, the frame is expanded by 4 bytes, refer to
VLAN tagging (Page 22). This expansion includes not only the VLAN ID but also priority
information.
Options for the VLAN assignment
There are various options for the assignment to VLANs:
● Port-based VLAN
Each port of a device is assigned a VLAN ID. You configure port-based VLAN in "Layer 2
> VLAN > Port-based VLAN (Page 130)".
● Protocol-based VLAN
Each port of a device is assigned a protocol group.
● Subnet-based VLAN
The IP address of the device is assigned a VLAN ID.
VLAN assignment on the device
In the factory settings, the following assignments are made on the SCALANCE S615:
P1 to P4
P5
You can change the assignment in "Layer 2 > VLAN > General (Page 128)".
The VLANs are in different IP subnets. To allow these to communicate with each other, the
route and firewall rule must be configured on the device.
SCALANCE S615 Web Based Management
Configuration Manual, 05/2015, C79000-G8976-C388-02
vlan1
For access from the local network (LAN) to the
device
vlan2
For access from the external network (WAN) to
the device
Technical basics
2.2 VLAN
21