3-2
Stinger®
IP2000 Configuration Guide
VLAN Configuration
The IP2000 VLAN implementation
VLAN bridge circuits
A VLAN bridge circuit is a pairing between a unique VLAN ID on the Gigabit Ethernet
port and a DSL subscriber connection on a LIM port. The transfer of traffic between
the two interfaces within the Stinger unit occurs at Layer 2. The Stinger does not
examine Layer 3 information within the data stream.
You create a VLAN bridge circuit by specifying the same
bridging-group
number in
both the
vlan-ethernet
and
connection
(or RADIUS) user profile. This is illustrated
in Figure 3-1.
Figure 3-1. Bridge circuit between a virtual LAN and bridged WAN interface
When you configure a bridging group, the system creates a separate bridging table
that contains only interfaces that share the same group number. When a packet is
received on an interface in a bridging group, the system consults only that table for
destination interfaces. It will not forward the traffic to interfaces that are not in the
same bridging group.
Note
With the current software, you cannot bridge multiple LIM-side PVCs in the
same system to the same VLAN ID.
Local management VLANs
You can configure a virtual IP interface as a management VLAN, which terminates on
the control module and provides access to the system via Telnet or SNMP through the
Gigabit Ethernet interface. The system supports up to 16 virtual IP interfaces. For
details, see “Defining a local virtual IP interface” on page 4-8.
A management VLAN is not paired with a WAN interface. It is typically used solely
for management access to the Stinger unit, as shown in Figure 3-2.
Figure 3-2. Management VLAN terminating in the Stinger unit
IP/ATM
Network side
User side
CPE router
Gigabit
Ethernet
IP
[in VLAN-ETHERNET:bridging-options]
bridging-group = 450
[in CONNECTION:bridging-options]
bridging-group = 450
[in IP-INTERFACE]
vlan-enabled = yes
vlan-id = 2000
PC
IP
