NETGEAR ProSAFE GS724Tv4, User Manual

Page: 12 / 28

2.2. A new VLAN holding all devices
2.1.1 Implementation
In the default switch configuration, all ports on the switch are linked to the VLAN with
VLAN ID
1.
This association on the switch is viewed using the switch menu sequence:
Switching
→
VLAN
→
VLAN Membership
in which the box under each port label contains a
U
.
2.1.2 Results from testing
Testing was done by issuing
ping
commands from the two PCs. Table 2.1 shows the results. In this
table, the ⇐⇒ symbol indicates a successful ping while the symbol indicates an unsuccessful ping. It
is taken as given that each PC could ping itself with the corresponding entry in Table 2.1 shown as a ‘x’.
Table 2.1: Ping exchange betwenn devices on one VLAN
g7 g19
192.168.14.9 192.168.8.7
255.255.255.0 255.255.0.0 255.255.255.0 255.255.0.0
g1
255.255.255.0
⇐⇒ ⇐⇒ ⇐⇒
g2
255.255.255.0
⇐⇒ ⇐⇒
g7
255.255.255.0
x x
g1
255.255.0.0
⇐⇒ ⇐⇒ ⇐⇒
g2
255.255.0.0
⇐⇒ ⇐⇒ ⇐⇒
g7
255.255.0.0
x x ⇐⇒
g23
255.255.255.0
⇐⇒ ⇐⇒
g19
255.255.255.0
x x
g23
255.255.0.0
⇐⇒ ⇐⇒ ⇐⇒
g19
255.255.0.0
⇐⇒
x x
Each device was set to have a network mask of
255.255.255.0
then
255.255.0.0
. With each net-
work mask setting pings between the PCs and devices were exchanged.
In this switch network configuration, an unsecure isolation of the two networks was obtained. By chang-
ing it’s network mask, a PC on one network could access devices not only on it’s onw network, but also
on another. Only partial isolation of network devices is shown in Table 2.1 as being achieved by setting
the network masks on the devices.
2.2 A new VLAN holding all devices
For this configuration the five devices of Figure 2.1 occupy a VLAN on their own, separate from VLAN
1.
VLANs are assiged identification when they are set up. This new VLAN is to be given the
VLAN ID
of
12 and named
VLAN-A-12
.
9