Nokia IP60 - Security Appliance, Руководство пользователя

Страница: 126 / 494

Configuring Network Settings
126 Nokia IP60 Security Appliance User Guide
Configuring VLANs
Your IP60 appliance allows you to partition your network into several virtual LAN networks (VLANs). A
VLAN is a logical network behind the IP60 appliance. Computers in the same VLAN behave as if they
were on the same physical network: traffic flows freely between them, without passing through a firewall.
In contrast, traffic between a VLAN and other networks passes through the firewall and is subject to the
security policy. By default, traffic from a VLAN to any other internal network (including other VLANs) is
blocked. In this way, defining VLANs can increase security and reduce network congestion.
For example, you can assign each division within your organization to a different VLAN, regardless of
their physical location. The members of a division will be able to communicate with each other and share
resources, and only members who need to communicate with other divisions will be allowed to do so.
Furthermore, you can easily transfer a member of one division to another division without rewiring your
network, by simply reassigning them to the desired VLAN.