Tripp Lite NGI-S08C2POE8, Руководство пользователя

Страница: 117 / 157

117

802.1QPort base VLAN
With port-based VLAN membership, the port is assigned to a specific VLAN independent of
the user or system attached to the port. This means all users attached to the port should be
members of the same VLAN. The network administrator typically performs the VLAN
assignment. The port configuration is static and cannot be automatically changed to another
VLAN without manual reconfiguration.
As with other VLAN approaches, the packets forwarded using this method do not leak into
other VLAN domains on the network. After a port has been assigned to a VLAN, the port
cannot send to or receive from devices in another VLAN without the intervention of a Layer 3
device.
The device that is attached to the port likely has no understanding that a VLAN exists. The
device simply knows that it is a member of a subnet and that the device should be able to talk to
all other members of the subnet by simply sending information to the cable segment. The
switch is responsible for identifying that the information came from a specific VLAN and for
ensuring that the information gets to all other members of the VLAN. The switch is further
responsible for ensuring that ports in a different VLAN do not receive the information.
This approach is quite simple, fast, and easy to manage in that there are no complex lookup
tables required for VLAN segmentation. If port-to-VLAN association is done with an
application-specific integrated circuit (ASIC), the performance is very good. An ASIC allows
the port-to-VLAN mapping to be done at the hardware level.
The port isolation is a port-based virtual LAN feature. It partitions the switching ports into
virtual private domains designated on a per port basis. Data switching outside of the port’s
private domain is not allowed. It will ignore the packets’ tag VLAN information.
This feature is a per port setting to configure the egress port(s) for the specific port to forward
its received packets. If the CPU port (port 0) is not an egress port for a specific port, the host
connected to the specific port cannot manage the Switch.
If you wish to allow two subscriber ports to talk to each other, you must define the egress port
for both ports. CPU refers to the Switch management port. By default it forms a VLAN with all
Ethernet ports. If it does not form a VLAN with a particular port then the Switch cannot be
managed from that port.
Notice:
Maximum allowable VLAN’s to configure on the device are 5.
Access Port:
Allows one VLAN only which is untagged port and PVID (particular VLAN id) should be
configured on interface by default VLAN 1 is PVID for all the interfaces. The port should be
connected to PC device.
Trunk Port:
Allows the user to configure up to 5 VLAN’s maximum on the interface and always tagged
where its PVID is 1 (System configure them automatically). The port should be connected to
another switch.
Default Settings:
All ports join in the VLAN 1.