74
VLAN
A Virtual LAN (VLAN) is a group of ports that form a logical
Ethernet segment on a Layer 2 Switch which provides better
administration, security, and management of multicast
trafc.AVLANisanetworktopologyconguredaccording
to a logical scheme rather than a physical layout. When you
use a VLAN, users can be grouped by logical function instead
of physical location. All ports that frequently communicate
with each other are assigned to the same VLAN, regardless
of where they are physically on the network. VLANs let you
logically segment your network into different broadcast
domains so that you can group ports with related functions
into their own separate, logical LAN segments on the same
Switch. This allows broadcast packets to be forwarded only
between ports within the VLAN which can avoid broadcast
packets being sent to all the ports on a single Switch. A
VLAN also increases network performance by limiting
broadcasts to a smaller and more manageable logical
broadcast domain. VLANs also improve security by limiting
trafctospecicbroadcastdomains.
802.1Q
Each VLAN in a network has an associated VLAN ID, which
appears in the IEEE 802.1Q tag in the Layer 2 header
of packets transmitted on a VLAN. The IEEE802.1Q
specication establishes a standard method for tagging
Ethernet frames with VLAN membership information.
Thekey for IEEE802.1Q toperformits functions is in its
tags.802.1Q-compliantSwitchportscanbeconguredto
transmittaggedoruntaggedframes.Atageldcontaining
VLAN information can be inserted into an Ethernet frame.
When using 802.1Q VLAN conguration, you congure
ports to be a part of a VLAN group. When a port receives
data tagged for a VLAN group, the data is discarded unless
the port is a member of the VLAN group.
Comments to this Manuals