Rockwell ArmorStratix 5700 series, Instructions Manual

Page: 367 / 548

Rockwell Automation Publication 1783-UM007F-EN-P - September 2016 367
Configure Switch Features Chapter 7
Isolate Different Traffic Types
Isolating data traffic from delay-sensitive traffic, such as voice traffic, increases
the quality of the voice transmission. In
Figure 50 , switch ports that are
connected to the IP phones belong to VLAN 3, a VLAN that is configured to
provide Voice over IP (VoIP) services on these connections, meaning priority is
given to voice traffic over regular IP data traffic. Voice traffic from the phone
and IP-phone service requests to an IP PBX server have priority over traffic
from the desktop devices that are attached to the IP phones.
To isolate data traffic further from voice traffic, the data traffic from the
attached desktop devices can be assigned to a separate VLAN.
Group Users
The network that is shown in Figure 50 provides access to three types of
network users:
• Wired employees
• Wireless employees
• Wired or wireless company visitors
Each user type requires different access levels to the company network. VLANs
and security policies on a router or Layer 3 switch can enforce privileges and
restrictions to different user types.
Refer to Figure 50 on page 366 :
• VLAN 5 offers employee-level access to the company resources. This
network access requires a direct connection to the specific switch ports.
• VLAN 7 offers Internet-only access to company visitors. Visitors with
wired or wireless connections to switch ports are assigned to this VLAN,
which automatically restricts guest access to only the Internet.
• VLAN 9, which has one or more switch ports that are connected to the
wireless access point, enforces security policies:
– Identifies the wireless user as an employee or a guest, for example.
– Determines what the user can do on the network, such as access only
the Internet or access other network resources.