LAN splitting
U
SER
G
UIDE
132
LAN
SPLITTING
The command
set lan-splitting on
allows you to use all the switch ports as separate and independent entities, each one has its own
MAC address and IP address. In other words, each port becomes a
routed
port.
This mode is just for particular applications, such as Smart Grid, which require the abilities to
control each single port and to activate particular Level 2 protocols (for example, IEEE 802.1x, IEEE
802.1d, Layer 2 Packet Filtering, etc ..).
The configuration of the single port is done with the command:
set ethX <options>
where
<options>
are the same as those available for the commands
set eth0
and
set eth1
. For
example:
set eth3 ipaddr 10.10.3.1 netmask 255.255.255.0
set eth3 description Connection-with-Printer
set eth3 on
set eth4 ipaddr 10.10.4.1 netmask 255.255.255.0
set eth4 description Connection-with-Server
set eth4
Any VLAN must be created on individual ports, for example:
set vlan add vid 50 interface eth5
set vlan eth5.50 ipaddr 192.168.50.1 netmask 255.255.255.0
If you have a LAN Splitting configuration, don‟t use
detect-link-state
: the state of the port and
of the VLANs are the same as the physical state of the port.
In case the terminals are connected on two different ports have to exchange packets at level 2 it is
necessary that the two ports are inserted in the same bridge group:
set eth1 on
set eth2 on
set vlan add vid 50 interface eth1
set vlan eth1.50 description VLAN50-on-port1
set vlan add vid 50 interface eth2
set vlan eth2.50 description VLAN50-on-port2
set bridge add br br0
set bridge addif br0 eth1.50
set bridge addif br0 eth2.50
set bridge br br0 description Bridge-between-eth1-and-eth2
set bridge br br0 ipaddr 192.168.50.1 netmask 255.255.255.0
set bridge br br0 on
In case you need to create a bridge between a Trunk port and an Access port, you have to use the
syntax:
set eth1 access-vlan vid 50
