Extreme Networks EPICenter Guide Manual page 119

Marketing VLAN, a Finance VLAN, and a Human Resources VLAN. All the hosts for marketing
personnel reside on the Marketing VLAN, will all the hosts for finance personnel reside on the Finance
VLAN. This isolates marketing and finance traffic and resources, preventing any unauthorized access to
financial information from any other group.
VLANs work by assigning a unique VLAN ID to each VLAN, and then assigning hosts to the
appropriate VLAN. All traffic from that host is tagged with the VLAN ID, and directed through the
network based on that VLAN ID. In the marketing and finance example, each department can be on the
same physical LAN, but each is tagged with a different VLAN ID. Marketing traffic going through the
same physical LAN switches will not reach Finance hosts because they exist on a separate VLAN.
Extreme Networks switches can support a maximum of 4000 VLANs. VLANs on Extreme Networks
switches can be created according to the following criteria:
Physical port
●
802.1Q tag
●
Protocol sensitivity using Ethernet, LLC SAP, or LLC/SNAP Ethernet protocol filters
●
A combination of these criteria
●
For a more detailed explanation of VLANs, see the ExtremeWare Software User Guide.
Using the EPICenter VLAN Manager
The EPICenter VLAN Manager creates and manages VLANs for Extreme Networks devices. In the
EPICenter system, a VLAN is defined uniquely by the following:
Name
●
802.1Q tag (if defined)
●
Protocol filters applied to the VLAN
●
As a result, multiple switches are shown as members of the same VLAN whenever all the above are the
same. The VLAN Manager allows you to create VLANs from a list of available switches and ports. Based
on your VLAN design, you segment your network into VLANs using the following steps:
1 Select a VLAN Name, a VLAN Tag, and protocol filter. Verify that your VLAN tag is not in use on
any other VLAN.
2 Add switches and ports that match your VLAN design and mark them as tagged or untagged.
3 Verify your VLAN configuration using the view by VLAN or view by Switch option in the VLAN
Manager.
Figure 53 shows a VLAN that will isolate NetBIOS traffic from the rest of your enterprise network.
EPICenter Concepts and Solutions Guide
Network Access Security
119