IP-COM G3224P, Руководство пользователя

Страница: 42 / 175

35
Port Configuration Considerations in Link Aggregation
To share egress/ingress traffic load, member ports in an aggregation group must be set to the same configurations
with respect to STP, port priorities, VLAN, port management, ARP attack defense, etc.
Consistent STP Configurations: Includes STP status, P2P port, edge port, port priority, path cost, etc.
Consistent port priorities
Consistent VLAN Configurations in an aggregation: Includes interface type, PVID, allowed VLAN and Untag/Tag
VLAN.
Consistent port priorities in an aggregation: Includes Jumbo frame, flow control and isolation settings.
Consistent ACL configurations: Includes Binding ACL lists
Consistent ARP attack defense in an aggregation: Includes ARP rate limit and ARP receiving rate settings.
If parameters on any port are changed in the aggregation group, configurations on other member ports should be
kept consistent.
For ports having joined in an aggregation group, the following configurations are not allowed:
Adding static MAC address
Configuring MAC learning
Enable IP filter
Configuring mirroring destination port
Enable voice VLAN feature
Enable 802.1X authentication
Below ports cannot join the aggregation group:
802.1x-enabled port(s)
ACL Binding port(s)
Mirroring destination port(s)
Ports on which MAC address filter is enabled
Ports on which IP address filter is enabled
Ports on which MAC address learning limit is set
4.3 VLAN Management
4.3.1 VLAN
VLAN Overview
A Virtual Local Area Network (VLAN) is a network topology which allows to logically instead of physically
segment a LAN into several net segments. A VLAN combines a group of hosts with a common set of requirements
logically instead of physically relocating devices or connections. In 1999, IEEE released 802.1Q draft as a
standardized VLAN implementation solution.
VLANs allow a network to be logically segmented into different broadcast domains. All members in a VLAN are
treated as in the same broadcast domain and communicate as if they were on the same net segment, regardless of
their physical locations. Logically, a VLAN can be equated to a broadcast domain, because broadcast packets are
forwarded to only members of the VLAN on which the broadcast was initiated. Different VLANs cannot