Extreme Networks EPICenter Guide Manual page 106

Managing Network Security
same physical LAN, but each is tagged with a different VLAN ID. Marketing traffic going through the
same physical LAN switches will not reach Finance hosts because they exist on a separate VLAN.
Extreme Networks switches can support a maximum of 4000 VLANs. VLANs on Extreme Networks
switches can be created according to the following criteria:
• Physical port
• 802.1Q tag
• Protocol sensitivity using Ethernet, LLC SAP, or LLC/SNAP Ethernet protocol filters
• A combination of these criteria
For a more detailed explanation of VLANs, see the ExtremeWare Software User Guide.
Using the EPICenter VLAN Manager
The EPICenter VLAN Manager creates and manages VLANs for Extreme Networks devices. In the
EPICenter system, a VLAN is defined uniquely by the following:
• Name
• 802.1Q tag (if defined)
• Protocol filters applied to the VLAN
As a result, multiple switches are shown as members of the same VLAN whenever all the above are the
same. The VLAN Manager allows you to create VLANs from a list of available switches and ports. Based
on your VLAN design, you segment your network into VLANs using the following steps:
1 Select a VLAN Name, a VLAN Tag, and protocol filter. Verify that your VLAN tag is not in use on
any other VLAN.
2 Add switches and ports that match your VLAN design and mark them as tagged or untagged.
3 Verify your VLAN configuration using the view by VLAN or view by Switch option in the VLAN
Manager.
Figure 47 shows a VLAN that will isolate NetBIOS traffic from the rest of your enterprise network.
Figure 47: Creating NetBIOS VLAN
106 EPICenter Concepts and Solutions Guide