Alloy AS5010-P, User Manual

Page: 203 / 435

AS Series User Manual
202
Doc No.: AS5-0116-01
VCL
MAC Based VLAN
MAC address-based VLAN decides the VLAN for forwarding an untagged frame based on the source
MAC address of the frame.
A most common way of grouping VLAN members is by port, hence the name port-based VLAN.
Typically, the device adds the same VLAN tag to untagged packets that are received through the
same port. Later on, these packets can be forwarded in the same VLAN. Port-based VLAN is easy to
configure, and applies to networks where the locations of terminal devices are relatively fixed. As
mobile office and wireless network access gain more popularity, the ports that terminal devices use
to access the networks are very often non-fixed.
A device may access a network through Port A this time, but through Port B the next time. If Port A
and Port B belong to different VLANs, the device will be assigned to a different VLAN the next time it
accesses the network. As a result, it will not be able to use the resources in the old VLAN. On the
other hand, if Port A and Port B belong to the same VLAN, after terminal devices access the network
through Port B, they will have access to the same resources as those accessing the network through
Port A do, which brings security issues. To provide user access and ensure data security in the
meantime, the MAC-based VLAN technology is developed.
MAC-based VLANs group VLAN members by MAC address. With MAC-based VLAN configured, the
device adds a VLAN tag to an untagged frame according to its source MAC address. MAC-based
VLANs are mostly used in conjunction with security technologies such as 802.1X to provide secure,
flexible network access for terminal devices.
Information
MAC-based VLAN entries are configured on this page. You can add and delete MAC-based VLAN
entries as well as assign entries to different ports from this section.
1. Select Configuration > VCL. > MAC-based VLAN
2. By default there will be no entries present, to configure select the Add New Entry Option
3. Add the MAC Address of the device you wish to configure, and assign the VLAN ID for the
device.
4. Assign the Port Members by ticking the check box and select Apply to save.
To revert any changes select Reset