Home » Cisco Manuals » Bridges & Routers » Cisco SR224T » Manual Viewer

Cisco SR224T Administration Guide - Page 156

VLAN Management, Configuring Quality of Service, VLAN Roles

Add to My Manuals
Save this manual to your list of manuals

Page 156 highlights

VLAN Management VLANs 12 VLANs address security and scalability issues. Traffic from a VLAN stays within the VLAN, and terminates at devices in the VLAN. It also eases network configuration by logically connecting devices without physically relocating those devices. If a frame is VLAN-tagged, a four-byte VLAN tag is added to each Ethernet frame. The tag contains a VLAN ID between 1 and 4094, and a VLAN Priority Tag (VPT) between 0 and 7. See Configuring Quality of Service for details about VPT. When a frame enters a VLAN-aware device, it is classified as belonging to a VLAN, based on the four-byte VLAN tag in the frame. If there is no VLAN tag in the frame or the frame is priority-tagged only, the frame is classified to the VLAN based on the PVID (Port VLAN Identifier) configured at the ingress port where the frame is received. The frame is discarded at the ingress port if Ingress Filtering is enabled and the ingress port is not a member of the VLAN to which the packet belongs. A frame is regarded as priority-tagged only if the VID in its VLAN tag is 0. Frames belonging to a VLAN remain within the VLAN. This is achieved by sending or forwarding a frame only to egress ports that are members of the target VLAN. An egress port may be a tagged or untagged member of a VLAN. The egress port: • Adds a VLAN tag to the frame if the egress port is a tagged member of the target VLAN, and the original frame does not have a VLAN tag. • Removes the VLAN tag from the frame if the egress port is an untagged member of the target VLAN, and the original frame has a VLAN tag. VLAN Roles All VLAN traffic (Unicast/Broadcast/Multicast) remains within its VLAN. Devices attached to different VLANs do not have direct connectivity to each other over the Ethernet MAC layer. Device VLANs can only be created statically. Some VLANs can have additional roles, including: • Voice VLAN: For more information refer to the Voice VLAN section. • Guest VLAN: Set in the Edit VLAN Authentication page. • Default VLAN: For more information refer to the Configuring Default VLAN Settings section. Cisco Small Business 200 Series Smart Switch Administration Guide 157

Section	Page
Getting Started	7
Starting the Web-based Switch Configuration Utility	7
Quick Start Switch Configuration	11
Interface Naming Conventions	11
Window Navigation	13
Viewing Statistics	17
Viewing Ethernet Interfaces	17
Viewing Etherlike Statistics	18
Viewing 802.1X EAP Statistics	19
Managing RMON	21
Managing System Logs	24
Setting System Log Settings	24
Setting Remote Logging Settings	26
Viewing Memory Logs	27
Managing System Files	29
Types of System Files	29
Upgrade/Backup Firmware/Language	32
Downloading or Backing-up a Configuration or Log	34
Viewing Configuration Files Properties	37
Copying Configuration Files	38
DHCP Auto Configuration	39
General Administrative Information	43
Switch Models	43
System Information	45
Rebooting the Switch	47
Monitoring the Fan Status and Temperature	48
Defining Idle Session Timeout	48
Pinging a Host	49
System Time	51
System Time Options	52
SNTP Modes	53
Configuring System Time	54
Managing Device Diagnostics	61
Testing Copper Ports	61
Displaying Optical Module Status	63
Configuring Port and VLAN Mirroring	64
Viewing CPU Utilization and Secure Core Technology	66
Configuring Discovery	68
Configuring Bonjour Discovery	68
LLDP and CDP	69
Configuring LLDP	70
Configuring CDP	91
Port Management	100
Configuring Ports	100
Setting Basic Port Configuration	101
Configuring Link Aggregation	103
Configuring Green Ethernet	111
Smartports	118
Overview	118
What is a Smartport	119
Smartport Types	119
Smartport Macros	122
Macro Failure and the Reset Operation	123
How the Smartport Feature Works	124
Auto Smartport	124
Error Handling	128
Default Configuration	128
Relationships with Other Features and Backwards Compatibility	129
Common Smartport Tasks	129
Configuring Smartport Using The Web-based Interface	131
Built-in Smartport Macros	136
Managing Power-over-Ethernet Devices	148
PoE on the Switch	148
Configuring PoE Properties	151
Configuring the PoE Power, Priority, and Class	152
VLAN Management	155
VLANs	155
Configuring Default VLAN Settings	158
Creating VLANs	159
Configuring VLAN Interface Settings	160
Defining VLAN Membership	161
Voice VLAN	165
Configuring the Spanning Tree Protocol	179
STP Flavors	179
Configuring STP Status and Global Settings	180
Defining Spanning Tree Interface Settings	182
Configuring Rapid Spanning Tree Settings	184
Managing MAC Address Tables	187
Configuring Static MAC Addresses	188
Managing Dynamic MAC Addresses	188
Configuring Multicast Forwarding	190
Multicast Forwarding	190
Defining Multicast Properties	193
Adding MAC Group Address	195
Adding IP Multicast Group Addresses	197
Configuring IGMP Snooping	198
MLD Snooping	200
Querying IGMP/MLD IP Multicast Group	203
Defining Multicast Router Ports	204
Defining Forward All Multicast	205
Defining Unregistered Multicast Settings	206
Configuring IP Information	207
Management and IP Interfaces	207
Configuring ARP	219
Domain Name Systems	220
Configuring Security	224
Defining Users	225
Configuring RADIUS	228
Configuring Management Access Authentication	230
Defining Management Access Method	231
Configuring TCP/UDP Services	236
Defining Storm Control	237
Configuring Port Security	238
Configuring 802.1X	241
Denial of Service Prevention	247
Using the SSL Feature	249
SSL Overview	249
Default Settings and Configuration	249
SSL Server Authentication Settings	250
Secure Sensitive Data	252
Introduction	252
SSD Rules	253
SSD Properties	258
Configuration Files	261
SSD Management Channels	266
Menu CLI and Password Recovery	266
Configuring SSD	267
Configuring Quality of Service	270
QoS Features and Components	271
Configuring QoS - General	272

Match case Limit results 1 per page

VLAN Management

VLANs

Cisco Small Business 200 Series Smart Switch Administration Guide

157

VLANs address security and scalability issues. Traffic from a VLAN stays within

the VLAN, and terminates at devices in the VLAN. It also eases network

configuration by logically connecting devices without physically relocating those

devices.

If a frame is VLAN-tagged, a four-byte VLAN tag is added to each Ethernet frame.

The tag contains a VLAN ID between 1 and 4094, and a VLAN Priority Tag (VPT)

between 0 and 7. See

Configuring Quality of Service

for details about VPT.

When a frame enters a VLAN-aware device, it is classified as belonging to a VLAN,

based on the four-byte VLAN tag in the frame.

If there is no VLAN tag in the frame or the frame is priority-tagged only, the frame is

classified to the VLAN based on the PVID (Port VLAN Identifier) configured at the

ingress port where the frame is received.

The frame is discarded at the ingress port if Ingress Filtering is enabled and the

ingress port is not a member of the VLAN to which the packet belongs. A frame is

regarded as priority-tagged only if the VID in its VLAN tag is 0.

Frames belonging to a VLAN remain within the VLAN. This is achieved by sending

or forwarding a frame only to egress ports that are members of the target VLAN.

An egress port may be a tagged or untagged member of a VLAN.

The egress port:

•

Adds a VLAN tag to the frame if the egress port is a tagged member of the

target VLAN, and the original frame does not have a VLAN tag.

•

Removes the VLAN tag from the frame if the egress port is an untagged

member of the target VLAN, and the original frame has a VLAN tag.

VLAN Roles

All VLAN traffic (Unicast/Broadcast/Multicast) remains within its VLAN. Devices

attached to different VLANs do not have direct connectivity to each other over the

Ethernet MAC layer.

Device VLANs can only be created statically.

Some VLANs can have additional roles, including:

•

Voice VLAN: For more information refer to the

Voice VLAN

section.

•

Guest VLAN: Set in the

Edit VLAN Authentication

page

•

Default VLAN: For more information refer to the

Configuring Default VLAN

Settings

section.