Siemens RUGGEDCOM ROX II, Руководство пользователя

Страница: 352 / 798

Chapter 8
Layer 2
RUGGEDCOM ROX II
CLI User Guide
306 VLAN Advantages
prohibited from sending frames to one another, but are still permitted to send frames to other, non-protected
ports within the same VLAN. This protection extends to all traffic on the VLAN, including unicast, multicast and
broadcast traffic.
NOTE
This feature is strictly local to the switch. PVLAN Edge ports are not prevented from communicating
with ports outside of the switch, whether protected (remotely) or not.
Ports belonging to a specific PVID and a VLAN type of PVLAN Edge are part of one PVLAN Edge group. A PVLAN
Edge group should include a minimum of two ports. There can be multiple PVLAN Edge groups on a switch.
It is not possible to combine a Gbit port with a 10/100 Mbit port as part of the same PVLAN Edge group.
Possible combinations of a PVLAN Edge group are listed below:
• A PVLAN Edge group with 10/100 Mbit ports from any line modules, with the exception of 2-port 100Base-FX
line modules
• A PVLAN Edge group with Gbit ports from any line modules
• A PVLAN Edge group with 10/10 Mbit ports from 2-port 100Base-FX and Gbit ports from any line modules
Section 8.5.1.9
VLAN Advantages
The following are a few of the advantages offered by VLANs.
Traffic Domain Isolation
VLANs are most often used for their ability to restrict traffic flows between groups of devices.
Unnecessary broadcast traffic can be restricted to the VLAN that requires it. Broadcast storms in one VLAN need
not affect users in other VLANs.
Hosts on one VLAN can be prevented from accidentally or deliberately assuming the IP address of a host on
another VLAN.
The use of creative bridge filtering and multiple VLANs can carve seemingly unified IP subnets into multiple
regions policed by different security/access policies.
Multi-VLAN hosts can assign different traffic types to different VLANs.