
VLAN Configuration
88
Instruction Manual - NXA-ENET8-POE+
Untagged VLANs
- Untagged VLANs are typically used to reduce broadcast traffic and to increase security. A group of network
users assigned to a VLAN form a broadcast domain that is separate from other VLANs configured on the switch. Packets are
forwarded only between ports that are designated for the same VLAN. Untagged VLANs can be used to manually isolate user
groups or subnets. However, you should use IEEE 802.3 tagged VLANs with GVRP whenever possible to fully automate VLAN
registration.
Forwarding Tagged/Untagged Frames
If you want to create a small port-based VLAN for devices attached directly to a single switch, you can assign ports to the same
untagged VLAN. However, to participate in a VLAN group that crosses several switches, you should create a VLAN for that group and
enable tagging on all ports.
Ports can be assigned to multiple tagged or untagged VLANs. Each port on the switch is therefore capable of passing tagged or
untagged frames. When forwarding a frame from this switch along a path that contains any VLAN-aware devices, the switch should
include VLAN tags. When forwarding a frame from this switch along a path that does not contain any VLAN-aware devices (including
the destination host), the switch must first strip off the VLAN tag before forwarding the frame. When the switch receives a tagged
frame, it will pass this frame onto the VLAN(s) indicated by the frame tag. However, when this switch receives an untagged frame
from a VLAN-unaware device, it first decides where to forward the frame, and then inserts a VLAN tag reflecting the ingress port's
default VID.
Configuring VLAN Groups
Use the VLAN > Static (Add) page to create or remove VLAN groups, set administrative status, or specify Remote VLAN type (see
the
Configuring Remote Port Mirroring
section on page 82). To propagate information about VLAN groups used on this switch to
external network devices, you must specify a VLAN ID for each of these groups.
The following table lists the options on this page:
Perform these steps to create VLAN groups:
1.
Click
VLAN
>
Static
.
2.
Select
Add
from the Action list.
3.
Enter a VLAN ID or range of IDs.
4.
Check
Status
to configure the VLAN as operational.
5.
Specify whether the VLANs are to be used for remote port mirroring.
6.
Click
Apply
.
VLAN - Static Options
Add
VLAN ID
ID of VLAN or range of VLANs (1-4094). VLAN 1 is the default untagged VLAN.
Status
Enables or disables the specified VLAN.
Remote VLAN
Reserves this VLAN for RSPAN (see the
Configuring Remote Port Mirroring
Modify
VLAN ID
ID of configured VLAN (1-4094).
VLAN Name
Name of the VLAN (1 to 32 characters).
Status
Enables or disables the specified VLAN.
Show
VLAN ID
ID of configured VLAN.
VLAN Name
Name of the VLAN.
Status
Operational status of configured VLAN.
Remote VLAN
Shows if RSPAN is enabled on this VLAN (see the
Configuring Remote Port Mirroring
FIG. 89
Creating Static VLANs