VLANs
This chapter describes the use of SFTOS to create IEEE 802.1Q Virtual LANs (VLANs); it contains the
following major sections:
•
Introduction to VLAN Configuration on page 207
•
Important Points to Remember on page 208
•
Implementing VLANs on page 209
•
VLAN Mode Commands on page 210
•
Configuration Task List for VLANs on page 211
•
Adding a LAG to a VLAN on page 215
•
Creating a Routed VLAN on page 217
•
GARP and GVRP on page 218
•
Creating an IP Subnet-based VLAN on page 223
•
Configuring a Private Edge VLAN (PVLAN) on page 223
•
Configuring a Native VLAN on page 224
•
Configuring a VLAN Tunnel (DVLAN or VLAN-Stack) on page 229
•
Displaying VLAN Information on page 233
Introduction to VLAN Configuration
Virtual LAN (VLAN) support in SFTOS conforms to the IEEE 802.1Q specification, allowing a network
to be logically segmented without regard to the physical location of devices on the network—one physical
network becomes multiple logical networks. These logical networks may, or may not, correspond to
subnets.
While maintaining Layer 2 forwarding speed, network segmentation provides:
•
Better administration
•
Better security
•
Better management of multicast traffic
Adding Virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and
routing. Like a bridge, a VLAN switch forwards traffic based on the Layer 2 header, which is fast, and like
a router, it partitions the network into logical segments, which provides better administration, security and
management of multicast traffic.
14
VLANs | 207