Appendix I: Vlan Applications On Vigor Router - Draytek Vigor2920 Series User Manual

A p p e n d
A p p e n d
o n V i g o
o n V i g o
Virtual Local Area Network is so-called VLAN. It offers the logical grouping technique to
separate the physical ports of Ethernet switches, thus we can management our local network
easier, more flexible and secure. For instance, you're a networking administrator in your
company and you're planning to isolate the visitors' traffics from your private network for
security considerations because you cannot ensure that visitors' computer is clean. Or you
want to separate your private network into several parts by divisions because there are too
many computers in the same network segment and it results in the local traffics heavily.
VLAN helps you to solve these situations, and DrayTek's products support bellow two
popular types:
P o r t - b
P o r t - b
It uses a matrix table of the physical ports to define the traffics how to exchange between each
port, and the traffics will be isolated from the ports are not being ticked in the same line. It is
the easiest way to setup an isolate network, but not a flexible way to maintain a growing
network. Because the idea of port-based VLAN is grouping by physical ports, but the
difficulty is how to handle the traffics between two or more Ethernet switches. Thus, VLAN is
suitable for some circumstances, for example, the rental apartment, SOHO office...and so on.
These clients may need two or three isolated networks only and setup a network in a simple
way.
T a g - b a
T a g - b a
The idea of tag-based VLAN is to identify a virtual LAN with a specific ID, therefore, VLAN
ID introduced by tag-based VLAN. Through VLAN ID, ports with different VID (VLAN ID)
will be identified as in different LANs, so the traffics also will be isolated from each of
VLANs. Many administrators who manage an enterprise network or even the internet service
providers (ISP) adopt Tag-based VLAN popularly because it is convenient to maintenance and
management a distributed network. Setting a large-scale network is easy by giving each of
them with different VID and isolating the traffics at the same time. Besides the VLAN ID,
there is another feature, Trunk, introduced. While the role of a port on an Ethernet switch is
setup as a Trunk port, it means the VLAN ID will be kept while forwarding the packets
between switches. By this feature, VLANs are able to distribute over two or more Ethernet
i x I : V
i x I : V
r R o u t
r R o u t
a s e d
a s e d
s e d
s e d
L A N A p
L A N A p
e r
e r
415
p l i c a t i o
p l i c a t i o
Vigor2920 Series User's Guide
n s
n s