Vlans And Frame Tagging; Vlan Configuration; Assigning Ports To Vlans; Vlan Classification - Dell PowerConnect 3248 System User's Manual

Back to Contents Page
VLANs
Dell™ PowerConnect™ 3248 Systems User's Guide
VLANs and Frame Tagging
VLAN Configuration
Automatic VLAN Registration
VLAN Examples

VLANs and Frame Tagging

The PowerConnect 3248 switch supports IEEE 802.1Q-compliant virtual LANs (VLANs). This capability provides a highly efficient architecture for establishing
VLANs within a network and for controlling broadcast/ multicast traffic between workgroups. Central to this capability is an explicit frame tagging approach for
carrying VLAN information between interconnected network devices.
With frame tagging, a four-byte data tag field is attached to frames that cross the network. The tag identifies to which VLAN the frame belongs. The tag may
be added to the frame by the end station itself or by a network device, such as a switch. In addition to VLAN information, the relative priority of the frame in
the network can be specified by the tag.
VLANs provide greater network efficiency by reducing broadcast traffic, and they also allow you to make network changes without having to update IP
addresses or IP subnets. VLANs inherently provide a high level of network security, since traffic must pass through a Layer 3 switch or a router to reach a
different VLAN.
The PowerConnect 3248 switch supports the following VLAN features:
Up to 255 VLANs based on the IEEE 802.1Q standard
l
Distributed VLAN learning across multiple switches using explicit or implicit tagging and GVRP (GARP VLAN Registration Protocol)
l
Port overlapping, allowing a port to participate in multiple VLANs
l
End stations that can belong to multiple VLANs
l
Passing traffic between VLAN-aware and VLAN-unaware devices
l
Four-level priority tagging
l
Link aggregation with VLANs
l

VLAN Configuration

By default, VLAN operation on the switch is enabled. Therefore, all frames are transferred internally through the switch with a VLAN tag. This tag may already
be on the frame entering the switch, or added to the frame by the switch. VLAN information already existing on frames entering the switch is automatically
handled by the switch. The switch learns VLAN information from tagged frames and appropriately switches frames out the proper ports based on this
information. The configuration of VLANs for frames entering the switch without tags must be made by the user of the switch. This configuration can be made
either through the web or console interface, or through Simple Network Management Protocol (SNMP).

Assigning Ports to VLANs

Before enabling VLANs for the switch, you must first assign each port to the VLAN groups in which it will participate. By default, all ports are assigned to VLAN 1
as untagged ports. You should add a tagged port (a port attached to a VLAN-aware device) if you want it to carry traffic for one or more VLANs and the device
at the other end of the link also supports VLANs. Assign the port at the other end of the link to the same VLANs. However, if you want a port on this switch to
participate in one or more VLANs and the device at the other end of the link does not support VLANs, you must add an untagged port (a port attached to a
VLAN-unaware device).
Port-based VLANs are tied to specific ports. The switch's forwarding determination is based on the destination MAC address and its associated port. Therefore,
to make valid forwarding and flooding decisions, the switch learns the relationship of the MAC address to its related port (and to the VLAN) at run-time.

VLAN Classification

Packets that the switch receives are treated in the following ways:
When an untagged packet enters a port, the system automatically tags it with the port's default VLAN ID tag number. Each port has a default VLAN ID
l
setting that is user configurable. The default setting is 1. You can change the default VLAN ID setting for each port from the VLAN Port Settings page.
When a tagged packet enters a port, the default VLAN ID setting has no effect on the tag.
l
The packet proceeds to the VLAN specified by its VLAN ID tag number.
¡
If the port in which the packet entered does not belong to the VLAN specified by the packet's VLAN ID tag, the system drops the packet.
¡
NOTE: You can change port VLAN membership settings in the VLAN Membership page.
If the port belongs to the VLAN specified by the packet's VLAN ID, the system can send the packet to other ports with the same VLAN ID.
¡
Packets leaving the switch are either tagged or untagged depending on that port's membership properties.
l
In the VLAN Membership page, if a U is assigned to a port and VLAN, packets leaving the switch from that port and VLAN are untagged. If a T is
l
assigned to a port and VLAN, packets leaving the switch from that port and VLAN are tagged with the respective ID for the VLAN to which that port