Mac-Based Vlan - ZyXEL Communications MGS3600-24F User Manual

F M
RONT ATTER

7.11.6 MAC-Based VLAN

Use the MAC-Based VLAN
The most common way of grouping VLAN members is by port, hence the name port-based VLAN. Typically, the device adds the same VLAN tag
to untagged packets that are received through the same port. Later on, these packets can be forwarded in the same VLAN. A port-based VLAN is
easy to configure and is best suited to networks where the locations of hosts are fixed. As mobile office and wireless network access gain more
popularity, the ports that terminal devices use to access the networks are very often non-fixed. A device may access a network through Port A this
time, but through Port B the next time. If Port A and Port B belong to different VLANs, the device will be assigned to a different VLAN the next time
it accesses the network. As a result, it will not be able to use the resources in the old VLAN. On the other hand, if Port A and Port B belong to the
same VLAN, after terminal devices access the network through Port B, they will have access to the same resources as those accessing the net-
work through Port A do, which brings security issues. MAC-based VLANs solve these problems.
MAC-based VLANs add a VLAN tag to an untagged frame according to its source MAC address. MAC-based VLANs are mostly used in conjunc-
tion with security technologies such as 802.1X to provide secure, flexible network access for terminal devices.
Configuration
Use the Configuration sub-menu to setup MAC-based VLANs.
To configure MAC-based VLANs:
1. Click Configuration >
2. Click Add new entry.
3. Configure the parameters.
4. Click Save.
Parameter description
MAC Address:

Use this field to configure any unicast MAC address for the MAC-based VLAN entry. No broadcast or multicast MAC addresses are allowed.
VLAN ID:

Use this field to configure the VLAN identity.
MGS3600-24F/XGS3600-26F/XGS3600-28F
sub-menu to configure a VLAN based on the source MAC address of untagged frames rather than port.
VLAN > MAC address-based VLAN > Configuration.
7-86 U ' G
SER S UIDE