Table of Contents
Advertisement
17.7 Description of MAC VLANs
17.7.1 Overview
MAC VLANs divide VLAN groups by source MAC address. MAC addresses can be
registered with VLANs by configuration, or dynamically through the Layer 2 authentication
functionality.
MAC VLANs can be set to allow communication only with terminals permitted to connect by
registering MAC addresses of permitted terminals during configuration, or by registering
MAC addresses authenticated using the Layer 2 authentication functionality.
The figure below shows an example MAC VLAN configuration. When trunk ports are set
between switches comprising a VLAN, VLANs are determined by VLAN tags regardless of
source MAC addresses. Therefore, all switches do not need to be set with the same MAC
address. The MAC addresses of the terminals connected to the MAC ports are set for each
switch.
Figure 17-9 Example MAC VLAN configuration
17.7.2 Connections between switches and MAC address settings
When a MAC VLAN is configured on multiple switches, we recommend that you use a trunk
port for connections between the switches. VLAN judgment for frames received on trunk
ports is performed by VLAN tags. This allows communication by MAC VLAN, even when no
source MAC address is set for a VLAN. For details about using a trunk port to connect
switches, see Figure 17-9 Example MAC VLAN configuration.
When a MAC port is used to connect switches, all MAC addresses belonging to the VLAN
need to be set on all switches. If a router exists, register the MAC address of the router.
Also, when using VRRP, register the MAC address of the virtual router.
The following figure shows switches connected by MAC port.
17 VLANs
271
Advertisement
Table of Contents
