Enterasys SmartSwitch 6H202-24 Скачать руководство пользователя

Страница: 75 / 82

Example 4, Isolating Network Traffic According to Protocol

Examples

4-15

Figure 4-11

Example 4, Isolating Traffic According to Protocol

4.4.1

Solving the Problem

Much of the existing network configuration can remain as it was for

Example 3, 1D Trunk

Connection to 802.1Q VLAN Network

. However, Switch 3, Switch 5, and the devices that will

make up Publication’s Grey VLAN have been added.

Switch 5 will be configured to isolate all AppleTalk protocol frame traffic to the devices in the
Grey VLAN and all other protocol traffic to the Yellow VLAN. Switch 3 will link the traffic from
Switch 5 to the buildings network backbone.

Floor 1

Floor 2

Floor 3

Floor 4

Bridge 1

Bridge 2

Bridge 3

Red VLAN

Blue VLAN

2599_18

User

802.1D Legacy Bridge

802.1Q VLAN-Aware Switch

User B

Server

Mail Server

Green VLAN

Bridge 4

Red VLAN

File Server

Grey VLAN

Printer

Publications

4
5

ellow VLAN

Green, Inc.

Содержание SmartSwitch 6H202-24

Страница 1: ...802 1Q VLAN User s Guide 9032599 03...

Страница 2: ......

Страница 3: ...N THEM EVEN IF ENTERASYS NETWORKS HAS BEEN ADVISED OF KNEW OF OR SHOULD HAVE KNOWN OF THE POSSIBILITY OF SUCH DAMAGES Enterasys Networks Inc 35 Industrial Way Rochester NH 03867 2002 Enterasys Network...

Страница 4: ......

Страница 5: ...ponents 2 1 2 3 Configuration Process 2 2 2 3 1 Defining a VLAN 2 2 2 3 2 Classifying Frames to a VLAN 2 2 2 3 3 Customizing the VLAN Forwarding List 2 2 2 4 VLAN Switch Operation 2 3 2 4 1 Receiving...

Страница 6: ...3 22 3 7 3 Adding Forwarding List Entries 3 22 3 7 4 Deleting Forwarding List Entries 3 23 3 7 5 Changing the Frame Format 3 23 3 8 Protocol VLAN Configuration Screen 3 24 3 8 1 Displaying the Curren...

Страница 7: ...10 Protocol Ports Configuration Screen 3 30 3 11 Walkthrough Stage One 3 33 3 12 Walkthrough Stage Two 3 34 3 13 Walkthrough Stage Three 3 35 3 14 Walkthrough Stage Four 3 36 3 15 Final Walkthrough S...

Страница 8: ...itions 3 9 3 3 Port Assignment Configuration Screen Field Definitions 3 15 3 4 Port Filtering Configuration Screen Field Definitions 3 18 3 5 VLAN Forwarding Configuration Screen Field Definitions 3 2...

Страница 9: ...existing network infrastructure in a building and how the switch handles the frames while they make their way through the networks shown in the examples Chapter 3 describes the VLAN Local Management...

Страница 10: ...ed in this guide are listed below The SmartSwitch user s guide of any Enterasys Networks 802 1Q VLAN aware SmartSwitch device The manual can be obtained from the World Wide Web in Adobe Acrobat Portab...

Страница 11: ...roadcast and multicast traffic as though they were all connected to a common network VLAN aware switches isolate broadcast multicast and unknown traffic received from VLAN groups so that traffic from...

Страница 12: ...the departmental memberships of each workstation In a VLAN environment each SmartSwitch understands that certain individual ports or frames are members of separate workgroups In this environment a bro...

Страница 13: ...es in the network 1 2 3 Other VLAN Strategies VLANs may also be created by a variety of addressing schemes including the recognition of groups of MAC addresses or types of traffic One of the best know...

Страница 14: ...individual ports have been configured to allow communication to occur The configuration is accomplished using the Local Management VLAN Forwarding Configuration screen By default a VLAN is assigned to...

Страница 15: ...frame By default a port designated as a 1Q Trunk port has all VLANs in its Port VLAN List and is configured to transmit all frames as tagged frames A 1Q Trunk drops all incoming frames that do not hav...

Страница 16: ...olved Enterasys Networks products in the network A description of your network environment layout cable type etc Network load and frame size at the time of trouble if known The device history i e have...

Страница 17: ...witch to switch or from port to port within a switch 2 2 VLAN COMPONENTS Before describing the operation of an 802 1Q VLAN it is important to understand the basic elements that are combined to make up...

Страница 18: ...entifier contained within the frame The order of frame classification priority is by VLAN Tag a protocol match and lastly the PVID This combination of the switch port s identification and the VLAN ID...

Страница 19: ...ept the examples that follow view the switch operations from inside the switch Figure 2 1 depicts the inside of a switch with six ports numbered one through six The switch has been configured to assoc...

Страница 20: ...a VLAN aware switch or originated from a station capable of specifying a VLAN membership If a switch receives a frame containing a tag the switch will classify the frame in regard to its tag rather t...

Страница 21: ...e 2 1 This frame is a unicast untagged frame received on Port 3 The frame is then classified for VLAN C The switch then makes its forwarding decision by comparing the destination MAC address to its fi...

Страница 22: ......

Страница 23: ...tation connected to a switch port that is a member of the same VLAN as the switch s Host Data Port By default this is the default VLAN When the switch is configured with VLANs special precautions must...

Страница 24: ...to other VLANs Figure 3 2 shows an example of a switch configured with port 1 on the Management VLAN port and the other users belonging to VLANs A B and C NOTE The switch s virtual Host Data Port lik...

Страница 25: ...following a Assign the VLAN ID 2 of the new Management VLAN to a port In this example it is port 1 Leave the Port Mode setting in the default value of HYBRID b Assign the VLAN ID 2 of the new Manageme...

Страница 26: ...2 SUMMARY OF VLAN LOCAL MANAGEMENT The VLAN configuration process is an extension of normal Local Management operations A series of Local Management screens provides access to the functions and comma...

Страница 27: ...s to assign switched network ports to VLANs define new VLANs and configure port filtering according to a VLAN list or untagged frames Network users can be logically grouped into VLANs even if they spa...

Страница 28: ...Menu Item Screen Function DEVICE VLAN CONFIGURATION Used to view add name enable or disable VLANs within the device and also associate the VLANs to a Filter Database ID FID It also enables the user to...

Страница 29: ...itional information PORT FILTERING CONFIGURATION Used to set the switch to filter out inbound frames to prevent them from being forwarded by the switch out a particular port This screen also lists the...

Страница 30: ...reen Firmware Revision XX XX XX Device VLAN Configuration 25993 05 Module Type xxxxx xx BOOTPROM Revision XX XX XX 6C105 LOCAL MANAGEMENT Slot Number xx RETURN EXIT Forward Default VLAN Out All Ports...

Страница 31: ...not have the default VLAN as its PVID The default is NO VLAN ID upper part of screen Read Only Display the assigned VLAN IDs that are configured in the module Initially only the Default VLAN VLAN ID...

Страница 32: ...rt of screen Modifiable Enter input to select or define a new VLAN ID FID lower part of screen Modifiable Display the FID currently associated with the VLAN typed in the VLAN ID field A new number can...

Страница 33: ...D of the VLAN of which the FID association is to be changed If an illegal number is entered the Event Message Line will display PERMISSIBLE RANGE FOR VLAN IDS 2 to 4094 and the field will refresh with...

Страница 34: ...ys in the Event Message Line in the upper left hand corner of the screen 4 Use the arrow keys to highlight the SAVE command at the bottom of the screen Press ENTER The message SAVED OK displays 3 4 5...

Страница 35: ...nless those ports have a PVID of 1 those belonging to only the Default VLAN 3 Use the arrow keys to highlight the SAVE command at the bottom of the screen 4 Press ENTER The message SAVED OK displays 3...

Страница 36: ...rt Assignment Configuration Screen Firmware Revision XX XX XX Port Assignment Configuration 25992 06 Module Type xxxxx xx BOOTPROM Revision XX XX XX 6C105 LOCAL MANAGEMENT Slot Number xx RETURN EXIT P...

Страница 37: ...e device In this mode all frames are transmitted with a tag header included in the frame excluding BPDUs The switch will drop all untagged frames it receives on the 1Q Trunk port The Port VLAN List fo...

Страница 38: ...d at the bottom of the screen 4 Press ENTER The message SAVED OK displays 3 5 2 Assigning a VLAN ID The Port Assignment Configuration screen also enables the user to set each port s VLAN ID PVID by st...

Страница 39: ...CONFIGURATION SCREEN When to Use To perform the following functions Select a port and view a list of VLANs that are configured to have their frames transmitted out that port Filter out certain incomin...

Страница 40: ...of the VLANs associated with the VLAN ID If a VLAN does not have a name Not Defined is displayed Port Selectable To step to the port number of the interface being configured including the selection o...

Страница 41: ...xt screen 5 To display the previous screen use the arrow keys to highlight PREVIOUS Press ENTER to view the entries on the previous screen Filter Using VLAN Lists Toggle Filter out drop frames that ar...

Страница 42: ...ort VLAN List The default is NO 5 Use the arrow keys to highlight the Filter All Untagged Frames field 6 Use the SPACE bar or BACKSPACE key to toggle between YES or NO When set to YES the switch will...

Страница 43: ...the identification of the VLAN under examination This screen displays the list of ports currently configured to transmit frames for the VLAN ID in this field Firmware Revision XX XX XX VLAN Forwarding...

Страница 44: ...creen use the arrow keys to highlight PREVIOUS Press ENTER to view the entries on the previous screen 3 7 3 Adding Forwarding List Entries To add a port to the VLAN Forwarding List proceed as follows...

Страница 45: ...d VLAN ID and VLAN Name Press ENTER 2 Use the arrow keys to highlight the Port field Step through the available ports on the module with the SPACE bar or BACKSPACE 3 Use the arrow keys to highlight th...

Страница 46: ...he VLAN ID as established using the Protocol Port Configuration screen How to Access Use the arrow keys to highlight the PROTOCOL VLAN CONFIGURATION menu item on the 802 1Q VLAN Configuration Menu scr...

Страница 47: ...tocol Ports Configuration screen for that Priority and Protocol Type Configurable ports are all the physical ports and existing virtual interfaces such as for ATM VLAN ID Modifiable Enter the VLAN ID...

Страница 48: ...chosen Ether Type 0x0 displays so the user can input a particular Ether Type NOTE Any Ether type selected or entered in the Ether type field and saved will become part of the selection in the protoco...

Страница 49: ...follows 1 Use the arrow keys to highlight the VLAN ID field at the bottom of the screen Ether type Modifiable Enter the values of a new Ether type when CUSTOM is selected in the Protocol Type field T...

Страница 50: ...en be entered if necessary 5 Use the arrow keys to highlight the Configure Ports field near the bottom of the screen 6 Press the SPACE bar to toggle the field to apply the VLAN ID and Protocol Type en...

Страница 51: ...ine of information containing the VLAN ID of interest to display the current ports and port types associated with that VLAN ID The entries in the line of information must have been saved before you ca...

Страница 52: ...rent Ports column VLAN ID Read Only Display the VLAN ID that is in the line of information highlighted in the Protocol VLAN Configuration screen Protocol Read Only Display the protocol in the line of...

Страница 53: ...t to add of deleted from the VLAN ID shown in the VLAN ID field When a port is displayed the associated port type is displayed to the right of the port number In Figure 3 10 the port is 31 and the ass...

Страница 54: ...n a number to a new VLAN by typing the number 2 in the VLAN ID field 4 Use the arrow keys to highlight the FID field In this example we will assign the new VLAN to FID 2 by typing the number 2 in the...

Страница 55: ...LAN ID field for the module and port combination you wish to change NOTE For the purposes of this walkthrough port 3 will be configured NOTE As this port will connect to a single workstation and is no...

Страница 56: ...as a 1Q Trunk port for a connection to another VLAN aware switch This 1Q Trunk port will carry traffic from all VLANs allowing VLAN frames to maintain their VLAN ID across multiple switches NOTE For...

Страница 57: ...connection are set up we can proceed to activate the TEST VLAN 15 On the 802 1Q VLAN Main Menu screen use the arrow keys to highlight the DEVICE VLAN CONFIGURATION menu item Press ENTER The Device VL...

Страница 58: ...ng the Port Filtering Configuration screen A list of all ports eligible to transmit frames for a given VLAN will also be listed on the VLAN Forwarding Configuration screen Each port can also be set to...

Страница 59: ...at the bottom of the screen 26 Press ENTER The message SAVED OK displays The Port Filtering Configuration screen displays the Port VLAN List for port 2 and the Filtering All Untagged Names field is s...

Страница 60: ......

Страница 61: ...provided in the discussion of each example is a description of how the frames transmitted from one user would traverse the network to its target device 4 1 EXAMPLE 1 SINGLE SWITCH OPERATION This first...

Страница 62: ...screen to define the two VLANs for this switch the Red VLAN with a VLAN ID of 002 and the Blue VLAN with a VLAN ID of 003 3 The Administrator brings up the Port Assignment Configuration screen and as...

Страница 63: ...lassifies this new untagged frame as belonging to the Red VLAN 5 The switch adds the source MAC address and VLAN for station R2 to its Source Address Table in FID 2 and checks the Source Address Table...

Страница 64: ...Blue VLAN The following information shows how Switch 4 and Switch 2 are configured to create the two VLANs to isolate the users of the two companies from one another on the network using the existing...

Страница 65: ...ion in the port VLAN List with the new PVID information This makes Port 1 part of the Red VLAN Port 3 part of the Blue VLAN and both are set as VLAN frame format of untagged 3 Port 4 is configured as...

Страница 66: ...completes the transmission path between Switch 4 and Switch 2 4 2 2 Frame Handling The following describes how when User A attempts to log on to the File Server on Bridge 4 the frames from User A are...

Страница 67: ...Port 1 it does not forward the frame out that port but does forward the frame to Port 4 The frame is transmitted to Switch 2 with a VLAN Tag Header inserted in the frame The VLAN Tag Header indicates...

Страница 68: ...and User A have an entry in their respective Source Address Tables identifying which port to use for forwarding the frame to User A MAC address Y in FID 3 All switches update their Source Address Tab...

Страница 69: ...Incorporated staff is added to the facility Also the Green Incorporated Network Administrators want to add a Mail Server to the network on the first floor Figure 4 7 Example 3 1D Trunk Connection to...

Страница 70: ...om the mail server via Switch 2 and Switch 1 to be received and classified to the Default VLAN of Switch 4 Switch 2 Switch 2 is set as follows 1 The Forward Default VLAN Out All Ports is set to YES us...

Страница 71: ...nd receive mail traffic to from all VLAN users on the network backbone 4 3 2 Frame Handling The following describes how when User B attempts to contact the Mail Server on Switch 1 the frames are class...

Страница 72: ...e that is transmitted out Port 4 the 1Q Trunk retains its VLAN tag Figure 4 9 Switch 2 Forwards to 1Q Trunk 4 When Switch 1 receives the tagged broadcast frame it also examines the tag and classifies...

Страница 73: ...e The switch recognizes User B s MAC address in its Source Address Table FID 1 and updates that table to contain the Mail Server s MAC address and port combination The switch checks the Filtering Data...

Страница 74: ...ork to prevent unwanted multicast frames from slowing down the whole network and yet be able to send and receive frames associated with other protocols In this example illustrated in Figure 4 7 the Pu...

Страница 75: ...ed to isolate all AppleTalk protocol frame traffic to the devices in the Grey VLAN and all other protocol traffic to the Yellow VLAN Switch 3 will link the traffic from Switch 5 to the buildings netwo...

Страница 76: ...ng the Device VLAN Configuration screen This adds the Default VLAN to the Port VLAN List of every switch port and all VLANs become members of FID 1 3 A Port VLAN ID is assigned to Port 3 using the Por...

Страница 77: ...he AppleTalk protocol VLAN ID 6 Protocol Type AppleTalk Status ADD This creates the protocol VLAN ID 6 that will handle only AppleTalk frames and enables ports to be assigned the this VLAN 5 The Apple...

Страница 78: ...ver is received on any of the Ports 2 through 8 the frame would be part of the Yellow VLAN and transmitted out Port 1 as a tagged frame to Switch 3 and handled in the same manner as previously describ...

Страница 79: ...r part of screen Modifiable 3 10 VLAN Out All Ports Toggle 3 9 E Examples 4 1 F FID See Filtering Database ID Filtering Database 1 5 Filtering Database ID 1 4 Forwarding list 1 4 adding entries 3 22 c...

Страница 80: ...Type upper part of screen Read Only 3 30 Priority Read Only 3 30 Protocol Read Only 3 30 Protocol VLAN Configuration screen 3 24 Action Toggle 3 26 Configured Ports 3 25 Configured Ports BitMap upper...

Страница 81: ...nabling 3 12 VLAN Forwarding Configuration screen ADD DELETE Toggle 3 22 Current VLAN Ports Read Only 3 21 Frame Format upper part of screen Read Only 3 21 Frame Type lower part of screen Toggle 3 22...

Страница 82: ......

Результаты поиска

Содержание SmartSwitch 6H202-24

Отзывы:

Похожие инструкции для SmartSwitch 6H202-24

Бренды по названию

Популярные бренды

Enterasys SmartSwitch 6H202-24, Руководство пользователя

Результаты поиска

Содержание SmartSwitch 6H202-24

Отзывы:

Похожие инструкции для SmartSwitch 6H202-24

Бренды по названию

Популярные бренды