Draytek Vigor3300 Series, Руководство пользователя, Страница: 176 / 213

Vigor3300 Series User’s Guide
170
5
5
.
.
1
1
.
.
6
6
E
E
x
x
a
a
m
m
p
p
l
l
e
e
f
f
o
o
r
r
A
A
C
C
o
o
m
m
p
p
a
a
n
n
y
y
a
a
n
n
d
d
G
G
u
u
e
e
s
s
t
t
A company wants to separate the Engineer Department, Sales Department, Marketing
Department and guest to limit their communication with any department to ensure the security.
In this case, we can define four VLANs that are VLAN5, VLAN6, VLAN7 and VLAN8. The
subnet of VLAN5 is 192.168.1.0; the subnet of VLAN6 is 192.168.2.0; the subnet of VLAN7
is 192.168.3.0; and the subnet of VLAN8 is 192.168.4.0. However, the notebook of guest does
not support 802.1Q.
P P r r o o c c e e d d u u r r e e : :
1. Refer to A.1 to block LAN-to-LAN communication.
2. Create VLAN5, VLAN6, VLAN7 and VLAN8 Groups.
3. In the VLAN5, type “5” to VLAN ID. In the Member field, choose p1. Then choose the
“Tagged”for Frame Tag Operation in p1. We can ignore the PVID (Port VLAN ID),
because 802.1q tag will be inserted to the frame from the PC of Engineer Department.
4. In the VLAN6, type “6” to VLAN ID. In the Member field, choose p2. Then choose the
“Tagged” for Frame Tag Operation in p2. We can ignore the PVID (Port VLAN ID),
because 802.1q tag will be inserted to the frame from Engineer Department.
5. In the VLAN7, type “7” to VLAN ID. In the Member field, choose p3. Then choose the
“Tagged” for Frame Tag Operation in p3. We can ignore the PVID (Port VLAN ID),
because 802.1q tag will be inserted to the frame from the PC of Engineer Department.