ZyXEL Communications SAM1316-22, User Manual

Page: 133 / 464

SAM1316-22 User’s Guide
133
C
H A P T E R
1 7
VLAN
This chapter shows you how to configure IEEE 802.1Q tagged VLANs.
17.1 Introduction to VLANs
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Devices on a logical network belong to one group. A
device can belong to more than one group. With VLAN, a device cannot directly
talk to or hear from devices that are not in the same group(s); the traffic must
first go through a router.
In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents one
subscriber from accessing the network resources of another on the same LAN,
thus a user will not see the printers and hard disks of another user in the same
building.
VLAN also increases network performance by limiting broadcasts to a smaller and
more manageable logical broadcast domain. In traditional switched environments,
all broadcast packets go to each and every individual port. With VLAN, all
broadcasts are confined to a specific broadcast domain.
Note that a VLAN is unidirectional, it only governs outgoing traffic.
17.2 Introduction to IEEE 802.1Q Tagged VLAN
Tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the device
on which they were created. The VLANs can be created statically by hand or