Mac-Based Vlans - D-Link DES-3225G User Manual

24-port NWay Ethernet Switch User's Guide
VLANs can also provide a level of security to your network.
MAC-based VLANs will only deliver packets between
stations that are members of the VLAN. Port-based VLANs
allow you to configure ports to not accept packets from
outside of the VLAN.
The untagging feature of IEEE 802.1Q VLANs allow VLANs
to work with legacy switches that don 't recognize VLAN
tags in packet headers. The tagging feature allows VLANs
to span multiple 802.1Q-compliant switches through a
single physical connection and allows Spanning Tree to be
enabled on all ports and work normally.

MAC-based VLANs

The DES-3225G supports up to 12 MAC-based VLANs,
which are by their nature, limited to the switch itself and
the devices connected to it. Two key features inherent in
MAC-based VLANs are flexibility and security.
Since MAC addresses are hard-wired into a station's
network interface card (NIC), MAC-based VLANs enable
network managers to move a station to a different physical
location on the network and have that station
automatically retain its VLAN membership. This provides
the network with a high degree of flexibility since even
notebook PC's can plug into any available port on a
network and communicate with the same people and use
the same resources that have been allocated to the VLAN
in which it is a member.
MAC-based VLANs include groups of individual devices.
Communications can be restricted to only certain devices
that are members of a common VLAN. This provides a high
degree of security by allowing network managers to decide
access rights on a device-per-device basis.
Switch Management Concepts
41