Page 3
Enterasys Networks reserves the right to make changes in specifications and other information contained in this document and its web site without prior notice. The reader should in all cases consult Enterasys Networks to determine whether any such changes have been made.
GARP Switch Operation... 2-5 Managing the Switch... 3-1 3.1.1 3.1.2 Summary of VLAN Local Management... 3-4 802.1Q VLAN Configuration Menu Screen ... 3-5 Device VLAN Configuration Screen ... 3-7 802.1Q VLANs ... 1-3 SecureFast VLANs ... 1-3 Other VLAN Strategies ... 1-3 Defining a VLAN ...
Page 6
Example 1, Single Switch Operation... 4-1 4.1.1 4.1.2 Example 2, VLANs Across Multiple Switches ... 4-3 4.2.1 4.2.2 Example 3, 1D Trunk Connection to 802.1Q VLAN Network... 4-8 4.3.1 4.3.2 Example 4, Isolating Network Traffic According to Protocol ... 4-14 4.4.1 Contents Defining a VLAN ...
Chapter 2, VLAN Operation, describes the operation of an 802.1Q VLAN, the steps necessary to prepare an 802.1Q VLAN aware switch for VLAN operation, and examines the operation of an 802.1Q VLAN switch. IMPORTANT NOTICE Chapter 4 to see how VLANs can be created and changed...
Configuration, describes how to set up the switch for local and remote management, shows the Local Management screens used in 802.1Q VLAN configuration and explains their use. Chapter 4, Examples, offers examples of 802.1Q VLANs and explains how network transmissions are treated by the components of each VLAN. RELATED DOCUMENTS...
Virtual Local Area Networks This chapter introduces the concepts of Virtual Local Area Networks (VLANs) and discusses the central concepts of IEEE 802.1Q VLANs. This chapter also contains information on how to contact Enterasys Networks for additional support related to VLANs.
Types of VLANs Figure 1-1 Example of a VLAN In this example, the Sales and Finance workstations have been placed on two separate VLANs. In a plain Ethernet environment, the entire network is a broadcast domain, and the SmartSwitches follow the IEEE 802.1D bridging specification to send data between stations. A broadcast or multicast transmission from a Sales workstation in Building One would propagate to all the switch ports on SmartSwitch A, cross the high speed link to SmartSwitch B, and then propagated out all switch ports on SmartSwitch B.
1.2.1 802.1Q VLANs An 802.1Q VLAN switch determines the VLAN membership of a data frame by its Tag Header, described later in this chapter. If the frame received is not tagged, the switch classifies the frame into the VLAN that is assigned as the default VLAN of the switch.
VLAN Terms VLAN TERMS To fully understand the operation and configuration of port based VLANs, it is essential to understand the definitions of several key terms. VLAN ID A unique number (between 1 and 4094) that identifies a particular VLAN. VLAN Name A 32-character alphanumeric name associated with a VLAN ID.
Page 15
1Q Trunk A connection between 802.1Q switches that passes only traffic with a VLAN Tag Header inserted in the frame. By default, a port designated as a 1Q Trunk port has all VLANs in its Port VLAN List and is configured to transmit all frames as tagged frames.
Getting Help GETTING HELP For additional support related to this document, contact Enterasys Networks using one of the following methods: World Wide Web http://www.enterasys.com Phone (603) 332-9400 Internet mail support@enterasys.com ftp://ftp.enterasys.com Login anonymous Password your email address To send comments or suggestions concerning this document, contact the Technical Writing Department via the following email address: TechWriting@enterasys.com...
VLAN association as it passes from switch to switch or from port to port within a switch. VLAN COMPONENTS Before describing the operation of an 802.1Q VLAN, it is important to understand the basic elements that are combined to make up an 802.1Q VLAN.
Before a VLAN can operate, steps must be performed to configure the switch to establish and configure a VLAN. Enterasys Networks VLAN aware SmartSwitches default to operate in the 802.1Q VLAN mode. However, further configuration is necessary to establish multiple logical networks.
The operation of an 802.1Q VLAN switch is best understood from a point of view of the switch itself. To illustrate this concept, the examples that follow view the switch operations from inside the switch.
2.4.2.1 Broadcasts, Multicasts, and Unknown Unicasts If a frame with a broadcast, multicast, or other unknown address is received by an 802.1Q VLAN aware switch, the switch checks the VLAN classification of the frame. The switch then forwards the frame out all ports that are identified in the Forwarding List for that VLAN. For example, if...
GARP Switch Operation 2.4.2.2 Known Unicasts When a VLAN switch receives a frame with a known MAC address as its destination address, the action taken by the switch to determine how the frame is transmitted depends on the VLAN, the VLAN associated FID, and if the port identified to send the frame is enabled to do so.
VLAN Configuration This chapter describes how to set up the switch for local or remote management, and the VLAN Local Management screens used to create and configure VLANs in a SmartSwitch. MANAGING THE SWITCH The switch may be managed locally via a terminal connected to the COM port, or remotely (SNMP or Telnet sessions) from a management station connected to a switch port that is a member of the same VLAN as the switch’s Host Data Port.
Managing the Switch Figure 3-1 Switch Management with Only Default VLAN 3.1.2 Switch with VLANs If the switch is to be configured for multiple VLANs, it may be desirable to configure a management-only VLAN. This allows a management station connected to the management VLAN to manage all ports on the switch and make management secure by preventing management via ports assigned to other VLANs.
Figure 3-2 Switch Management with VLANs To set up the switch shown in process described below: 1. Use the Device VLAN Configuration screen for the following: a. Define a new VLAN named “Management VLAN” (or other suitable name) and its VLAN ID.
A switch supporting 802.1Q VLANs provides the VLAN Configuration screens as a standard part of its Local Management hierarchy when the switch is configured to operate in 802.1Q Mode. The hierarchy of the Local Management screens pertaining to 802.1Q VLAN configuration is shown in Figure 3-3.
Access Local Management as described in your device user’s guide. Perform all required initial setup operations. Navigate to the 802.1Q VLAN Configuration Menu screen to begin the VLAN configuration process for the device.
802.1Q VLAN Configuration Menu Screen How to Access Use the arrow keys to highlight the 802.1Q VLAN CONFIGURATION MENU item from the module, device, or chassis specific Configuration Menu screen and press ENTER. The 802.1Q VLAN Configuration Menu screen displays.
VLANs, and assign VLANs to FIDs. The screen can display up to eight VLANs simultaneously. How to Access Use the arrow keys to highlight the DEVICE VLAN CONFIGURATION menu item on the 802.1Q VLAN Configuration Menu screen and press ENTER. The Device VLAN Configuration screen displays. Screen Function Displays a list of ports and enables the user to assign a Port VLAN ID (PVID) to each port.
Field Definitions Table 3-2 Device VLAN Configuration Screen Field Definitions Use this field … Forward Default VLAN Out All Ports (Toggle) VLAN ID - upper part of screen (Read-Only) FID - upper part of screen (Read-Only) Admin Status (Toggle) To … Assign or remove the default VLAN from the Port VLAN List for all ports.
Device VLAN Configuration Screen Table 3-2 Device VLAN Configuration Screen Field Definitions (Continued) (Continued) Use this field … VLAN ID - lower part of screen (Modifiable) FID - lower part of screen (Modifiable) VLAN Name - lower part of screen (Modifiable) ADD/DEL (Toggle) 3.4.1 Defining a VLAN...
6. Type a name of up to 32 ASCII characters in the VLAN Name field of a VLAN, and is not required for VLAN operation. 7. Use the arrow keys to highlight the ADD/DEL field. 8. Press the SPACE bar to select ADD for a defined VLAN. Press ENTER. The new VLAN will be added to the VLAN list.
Device VLAN Configuration Screen 4. Use the arrow keys to highlight the SAVE command at the bottom of the screen. Press ENTER. The message “SAVED OK” displays. 3.4.4 Deleting a VLAN To delete a VLAN from the current VLAN list, proceed as follows: 1.
3. Use the arrow keys to highlight the SAVE command at the bottom of the screen. 4. Press ENTER. The message “SAVED OK” displays. NOTE: The default VLAN cannot be disabled. 3.4.7 Changing the Forwarding Mode To change the forwarding mode of the switch, proceed as follows: 1.
How to Access Use the arrow keys to highlight the PORT ASSIGNMENT CONFIGURATION menu item on the 802.1Q VLAN Configuration Menu screen and press ENTER. The Port Assignment Configuration screen displays. Screen Example Figure 3-6 Port Assignment Configuration Screen...
1D Trunk, the Port VLAN List and the associated frame type are automatically configured. • 1Q TRUNK – This mode sets the port for transmitting to another 802.1Q aware device. In this mode, all frames are transmitted with a tag header included in the frame (excluding BPDUs).
VLANs. The 1D Trunk mode can be used in conjunction with the “Forward Default VLAN Out All Ports” parameter and the Default VLAN to allow all stations on a legacy portion of the network to access all stations or servers in the 802.1Q portion of the network.
Filter out of all incoming untagged frames so they will not be transmitted out another port. How to Access Use the arrow keys to highlight the PORT FILTERING CONFIGURATION menu item on the 802.1Q VLAN Configuration Menu screen and press ENTER. The Port Filtering Configuration screen displays. Port Filtering Configuration Screen...
Port Filtering Configuration Screen Screen Example Figure 3-7 Port Filtering Configuration Screen Field Definitions Table 3-4 Port Filtering Configuration Screen Field Definitions Use this field … VLAN ID (Read-Only) VLAN Name (Read-Only) Port (Selectable) 3-18 VLAN Configuration To … See the VLAN ID of the VLANs that are configured to have their frames transmitted out the port selected in the Port # field.
Table 3-4 Port Filtering Configuration Screen Field Definitions (Continued) Use this field … Filter Using VLAN Lists (Toggle) Filter All Untagged Frames (Toggle) 3.6.1 Displaying VLAN IDs Associated with a Port To display the VLAN IDs and VLAN Names of the VLANs associated with a particular port, proceed as follows: 1.
Specify the formats of the frames (Tagged or Untagged) that a VLAN port will forward. How to Access Use the arrow keys to highlight the VLAN FORWARDING CONFIGURATION menu item on the 802.1Q VLAN Configuration Menu screen and press ENTER. The VLAN Forwarding Configuration screen displays. 3-20...
Screen Example Figure 3-8 VLAN Forwarding Configuration Screen Field Definitions Table 3-5 VLAN Forwarding Configuration Screen Field Definitions Use this field … Current VLAN Ports (Read-Only) Port Type (Read-Only) Frame Format (Read-Only) VLAN ID (Selectable) To … See the ports that are currently configured to transmit frames classified to the selected VLAN.
VLAN Forwarding Configuration Screen Table 3-5 VLAN Forwarding Configuration Screen Field Definitions (Continued) Use this field … VLAN Name (Read-Only) ADD/DELETE (Toggle) Port (Selectable) Frame Type (Toggle) 3.7.1 Viewing Current VLAN Ports To display the VLAN Forwarding List for a particular VLAN, proceed as follows: 1.
2. Use the arrow keys to highlight the Port field. Step through the available ports on the module with the SPACE bar or BACKSPACE. 3. Use the arrow keys to highlight the ADD/DELETE field. Press the SPACE bar to select ADD or DELETE.
Protocol Port Configuration screen. How to Access Use the arrow keys to highlight the PROTOCOL VLAN CONFIGURATION menu item on the 802.1Q VLAN Configuration Menu screen and press ENTER. The Protocol VLAN Configuration screen displays. Screen Example Figure 3-9 Protocol VLAN Configuration Screen...
Field Definitions Table 3-6 Protocol VLAN Configuration Screen Field Definitions Use this field … VLAN ID - upper part of screen (Selectable) Protocol Type - upper part of screen (Selectable) Configured Ports (Selectable) VLAN ID (Modifiable) Configure Ports (Toggle) To … Display the VLAN IDs currently configured and may be selected after the screen is saved to call up the Protocol Ports Configuration screen using the ENTER key.
Page 48
Protocol VLAN Configuration Screen Table 3-6 Protocol VLAN Configuration Screen Field Definitions (Continued) Use this field … Protocol Type (Selectable) Feature Status (Toggle) Action (Toggle) 3-26 VLAN Configuration To … Select one of the following protocol types: IP – pertains to all IP associated Ether Types (i.e., 0x0x0800, 0x0806, and, 0x8035).
Table 3-6 Protocol VLAN Configuration Screen Field Definitions (Continued) Use this field … Ether type (Modifiable) 3.8.1 Displaying the Current Protocol, VLAN ID, and Port Assignments In some instances it may be desirable to see which VLAN IDs and the associated ports that are currently assigned to a particular protocol.
Page 50
Protocol VLAN Configuration Screen 2. Enter the VLAN ID. If a new VLAN ID is entered that has not been created on the switch, use a unique number between 2 and 4094. The VLAN IDs of 0, 1, and 4095 may not be used for user-defined VLANs.
11. Press ENTER and the new settings are displayed under the VLAN ID, Protocol Type, and Configured Ports values. 12. Use the arrow keys to highlight the SAVE command at the bottom of the screen. 13. Press ENTER. The message “SAVED OK” displays and the settings are saved. A particular line of data displayed may now be highlighted to display the Protocol Ports Configuration screen, as described in Section...
Protocol Ports Configuration Screen Screen Example Figure 3-10 Protocol Ports Configuration Screen Field Definitions Table 3-7 Protocol Ports Configuration Screen Field Definitions Use this field … Current Protocol Ports (Read-Only) Port Type (Read-Only) VLAN ID (Read-Only) Protocol (Read-Only) 3-30 VLAN Configuration To …...
Table 3-7 Protocol Ports Configuration Screen Field Definitions (Continued) Use this field … Port (Selectable)þ DELETE ALL PORTS (Selectable) 3.9.1 Adding/Deleting Ports Associated with a VLAN ID To add or delete ports from a VLAN, proceed as follows: 1. Use the arrow keys to highlight the Port field. 2.
NOTE: The screens displayed by your devices may be marginally different from those shown in the illustrations for this walkthrough. 1. On the 802.1Q VLAN Configuration Menu screen, use the arrow keys to highlight the DEVICE VLAN CONFIGURATION menu item. Press ENTER. The Device VLAN Configuration screen displays.
9. Use the arrow keys to highlight the RETURN command at the bottom of the screen. Press ENTER. The 802.1Q VLAN Configuration Menu screen displays. Use the arrow keys to select the PORT ASSIGNMENT CONFIGURATION menu item and press ENTER. The Port Assignment Configuration screen displays.
Quick VLAN Walkthrough 11. Use the SPACE bar to step sequentially through the previously configured VLAN ID numbers. When the number 0002 (the new VLAN ID) is displayed, the FID field updates to 0002, and the VLAN Name field updates showing the name assigned to this VLAN, TEST VLAN. 12.
Now that the TEST VLAN and the 1Q Trunk connection are set up, we can proceed to activate the TEST VLAN. 15. On the 802.1Q VLAN Main Menu screen, use the arrow keys to highlight the DEVICE VLAN CONFIGURATION menu item. Press ENTER. The Device VLAN Configuration screen, Figure 3-14, displays.
Quick VLAN Walkthrough Figure 3-14 Walkthrough Stage Four 16. Use the arrow keys to highlight the Admin Status field of VLAN ID 2, the TEST VLAN. 17. Press the SPACE bar to toggle the field to display Enabled. 18. Use the arrow keys to highlight the SAVE command at the bottom of the screen. 19.
20. On the 802.1Q VLAN Main Menu screen, use the arrow keys to highlight the PORT FILTERING CONFIGURATION menu item. Press ENTER. The Port Filtering Configuration screen displays. 21. Use the arrow keys to highlight the Port field. 22. Press the SPACE bar to step the field to display 2.
Examples This chapter provides examples of how VLAN aware SmartSwitches can be configured to group users at the port level to create VLANs in existing networks. Each example presents a problem and shows how it is solved by configuring the switches using the VLAN Local Management screens. The actual procedures and screens used to configure a VLAN aware switch are covered in Chapter VLAN...
VLANs and how users are assigned to them. 1. First, the switch is set for 802.1Q operation. Since traffic isolation is to be based on VLAN membership alone, the switch is set so the Red VLAN is a member of FID 2 and the Blue VLAN is a member of FID 3 from the Device/VLAN Configuration screen.
EXAMPLE 2, VLANs ACROSS MULTIPLE SWITCHES This second example investigates the steps that must be taken to set up VLANs across multiple 802.1Q VLAN switches. This includes the configuration and operation of 1Q Trunks between 802.1Q VLAN switches. As shown in Figure 4-3, two companies, “Redco”...
Example 2, VLANs Across Multiple Switches Figure 4-3 Example 2, VLANs Across Multiple Switches 4.2.1 Solving the Problem To solve the problem in this example, the users are assigned to VLANs using Switch 4 and Switch 2 as shown in Figure 4-3.
Page 65
Port Mode: 1Q Trunk Port 4 is set as an 802.1Q Trunk port, which makes the port eligible to transmit to all VLANs, and all frames forwarded out this port are forwarded as tagged frames. By default there is no PVID associated with the trunk port and the port remains as a member of the Default VLAN.
Port 2, Port Mode: 1Q Trunk Port 2 is set as an 802.1Q Trunk port, which makes its Port VLAN List contain all VLANs and sets all frames forwarded out this port as tagged frames. This completes the transmission path between Switch 4 and Switch 2.
The VLAN Tag Header is inserted because Switch 4, Port 4 is designated as an 802.1Q Trunk port. In this case, the Port Mode setting for Port 4 is 802.1Q Trunk and the VLAN Frame format for that VLAN is tagged.
User A and the File Server are forwarded through the switch fabric in the same manner. EXAMPLE 3, 1D TRUNK CONNECTION TO 802.1Q VLAN NETWORK This example illustrates the use of a 1D Trunk to connect a device to a network of 802.1Q VLAN switches. Examples Figure...
4-7, a third group of stations, the Green Incorporated staff, is added to the facility. Also, the Green Incorporated Network Administrators want to add a Mail Server to the network on the first floor. Figure 4-7 Example 3, 1D Trunk Connection to 802.1Q VLAN Network Examples...
Port 4, Port Mode: 1Q Trunk This causes Port 4 to be set as an additional 802.1Q Trunk port, which makes its Port VLAN List contain all VLANs, and all frames forwarded out this port are forwarded as tagged frames.
• Port 3, Port Mode: 1D Trunk Port 2 is set as an 802.1Q Trunk port, which makes the port eligible to transmit frames of all VLANs, and sets all frames forwarded out this port as tagged frames. Port 3 is set as a 1D Trunk port, where frames classified as belonging to any VLAN are forwarded untagged, and received frames are classified as belonging to the Default VLAN.
Example 3, 1D Trunk Connection to 802.1Q VLAN Network Figure 4-8 Bridge 1 Broadcasts Frames 3. Switch 2 receives the tagged Red VLAN frame on Port 2, as shown in Tag in the frame is maintained, classifying the frame as belonging to the Red VLAN. The switch forwards the broadcast frame out all the eligible ports, Ports 3 and 4.
Port 1. The frame is then checked for eligibility and frame format for Port 1. As Port 1 is considered eligible to transmit to the Default VLAN, the frame is transmitted out Port 1 without a VLAN Tag. Example 3, 1D Trunk Connection to 802.1Q VLAN Network Examples 4-13...
Example 4, Isolating Network Traffic According to Protocol 8. Bridge 1 receives the frame and recognizes User B’s MAC address. The frame is forwarded to the correct port and the bridge’s Source Address Table is updated with an entry for the Mail Server’s MAC address.
Solving the Problem Much of the existing network configuration can remain as it was for Example 3, 1D Trunk Connection to 802.1Q VLAN Network. However, Switch 3, Switch 5, and the devices that will make up Publication’s Grey VLAN have been added.
Page 76
Port 4, Port Mode: 1Q Trunk Ports 2, and 4 are set as 802.1Q Trunk ports, which makes these ports eligible to transmit frames of all VLANs, and sets all frames forwarded out these ports as tagged frames. This allows traffic from Switch 4 to reach Switch 2 on the network backbone.
Page 77
3. To allow all frames (except the AppleTalk frames, which will be prevented in steps 4 and 5) from being transmitted out Port 1 to Switch 3 and the network backbone, Port VLAN IDs are assigned to all switch ports using the Port Assignment screen, as follows: •...
Page 78
Example 4, Isolating Network Traffic According to Protocol 6. Use the VLAN Forwarding Configuration screen to assign Port 1 to the Yellow VLAN and set the frame type to tagged. With this configuration, the frames transmitted on Port 1 are tagged as being from the Yellow VLAN.
Page 79
Numerics 1D Trunk 1-5, 3-16, 1Q Trunk 1-5, 3-15, Chapters organization Configuration Conventions viii Default VLAN Device VLAN Configuration screen ADD/DEL (Toggle) 3-10 Admin Status (Toggle) FID - lower part of screen (Modifiable) FID - upper part of screen (Read-Only) VLAN ID - lower part of screen (Modifiable) 3-10...
Page 80
VLAN ID - upper part of screen (Read- Related Documents Remote management. See managing the switch 3-15 3-19 Screens 3-19 802.1Q VLAN Configuration Menu screen Device VLAN Configuration screen Port Assignment Configuration screen 3-18 Port Filtering Configuration screen Protocol VLAN Configuration screen VLAN Forwarding Configuration screen...
Page 81
configuration default VLAN defining definition operation terms types VLAN Configuration deleting 3-12 disabling 3-12 enabling 3-12 VLAN Forwarding Configuration screen ADD/DELETE (Toggle) 3-22 Current VLAN Ports (Read-Only) Frame Format - upper part of screen (Read- Only) 3-21 Frame Type- lower part of screen (Toggle) Port (Selectable) 3-22 Port Type (Read-Only)
Need help?
Do you have a question about the 802.1Q and is the answer not in the manual?
Questions and answers