Allworx PowerFlex P810, User Manual

Page: 122 / 236

PowerFlex
8/24/48 Port GbE PoE Managed Switch User’s Guide
4.11.6
MAC-based VLAN
MAC address-based VLAN decides the VLAN for forwarding an untagged frame based on the source
MAC address of the frame.
The most common way of grouping VLAN members is by port, hence the name port-based VLAN.
Typically, the device adds the same VLAN tag to untagged packets received through the same port.
Later, forward these packets within the same VLAN. Port-based VLAN is easy to configure, and applies
to networks where the locations of terminal devices are relatively fixed. As mobile office and wireless
network access gain more popularity, the ports that terminal devices use to access the networks are
very often not fixed. A device may access a network through Port A this time, but through Port B the
next time. If Port A and Port B belong to different VLANs, the device will be assigned to a different
VLAN the next time it accesses the network. As a result, it will not be able to use the resources in the
old VLAN. On the other hand, if Port A and Port B belong to the same VLAN, after terminal devices
access the network through Port B, each has access to the same resources as those accessing the
network through Port A do, which brings security issues. To provide user access and ensure data
security, the MAC-based VLAN technology was developed.
MAC-based VLANs group VLAN members by MAC address. With MAC-based VLAN configured, the
device adds a VLAN tag to an untagged frame according to its source MAC address. Primarily, use
MAC-based VLANs in conjunction with security technologies such as 802.1X to provide secure, flexible
network access for terminal devices.
4.11.6.1 Configuration
This page enables adding and deleting MAC-based VLAN entries and assigning the entries to different
ports. This page displays only static entries.
To configure MAC address-based VLANs via the web interface:
1. Navigate to Configuration > VLAN > MAC-based VLAN > Configuration .
2. Click Add new entry and specify the MAC address and VLAN ID.
3. Click Apply or click Reset to cancel changes and revert to previously saved values. 0.
Figure 79:
MAC-based VLAN Membership Configuration
Toll Free 1-866- ALLWORX • 585 -421- 3850 • www.allworx.com
Revised: October 30, 2013
Page 114