D-Link DES-3624 Product Manual - Page 34

Q VLAN Segmentation, Sharing Resources Across 802.1Q VLANs,

Page 34 highlights

Stackable NWay Ethernet Switch User's Guide There are two key components to understanding 802.1Q VLANs: Port VLAN ID numbers (PVIDs) and VLAN ID numbers (VIDs). Both variables are assigned to a switch port, but there are important differences between them. A user can only assign one PVID to each switch port. The PVID defines which VLAN a packet belongs to when packets need to be forwarded to another switch port or somewhere else on the network. On the other hand, a user can define a port as a member of multiple VLANs (VIDs), allowing the segment connected to it to receive packets from many VLANs on the network. These two variables control a port's ability to transmit and receive VLAN traffic, and the difference between them provides network segmentation, while still allowing resources to be shared across more than one VLAN. 802.1Q VLAN Segmentation The following example is helpful in explaining how 802.1Q VLAN segmentation works. Take a packet that is transmitted by a machine on Port 1 that is a member of VLAN 2 and has the Port VLAN ID number 2 (PVID=2). If the destination lies on another port (found through a normal forwarding table lookup), the Switch then looks to see if the other port (Port 10) is a member of VLAN 2 (and can therefore receive VLAN 2 packets). If port 10 is not a member of VLAN 2, then the packet will be dropped by the Switch and will not reach its destination. If Port 10 is a member of VLAN 2, the packet will go through. This selective forwarding feature based on VLAN criteria is how VLANs segment networks. The key point being that Port 1 will only transmit on VLAN 2, because it's Port VLAN ID number is 2 (PVID=2). Sharing Resources Across 802.1Q VLANs Network resources such as printers and servers however, can be shared across 802.1Q VLANs. This is achieved by setting up overlapping VLANs as shown in the diagram below. VLAN 3 VLAN 1 VLAN 2 1 2 3 4 5 6 7 8 9 10 11 12 Port VIDs = 1 Port PVID = 3 Port VIDs = 2 Workstations Network Server Graphics Workstations Figure 5-4. Example of typical VLAN configuration In the above example, there are three different 802.1Q VLANs and each port can transmit packets on one of them according to their Port VLAN ID (PVID). However, a port can receive packets on all VLANs (VID) that it belongs to. The assignments are as follows: PVID (Port VLAN ID) 1 1 1 2 2 3 Ports Port 1 Port 2 Port 3 Port 11 Port 12 Port 7 VID (VLAN ID) 1 Member Ports 1,2,3,7 38 Switch Management Concepts

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175

Stackable NWay Ethernet Switch User’s Guide
38
Switch Management Concepts
There are two key components to understanding 802.1Q VLANs: Port VLAN ID numbers (PVIDs) and VLAN
ID numbers (VIDs). Both variables are assigned to a switch port, but there are important differences between
them. A user can only assign one PVID to each switch port. The PVID defines which VLAN a packet belongs
to when packets need to be forwarded to another switch port or somewhere else on the network. On the other
hand, a user can define a port as a member of multiple VLANs (VIDs), allowing the segment connected to it to
receive packets from many VLANs on the network. These two variables control a port’s ability to transmit
and receive VLAN traffic, and the difference between them provides network segmentation, while still
allowing resources to be shared across more than one VLAN.
802.1Q VLAN Segmentation
The following example is helpful in explaining how 802.1Q VLAN segmentation works. Take a packet that is
transmitted by a machine on Port 1 that is a member of VLAN 2 and has the Port VLAN ID number 2
(PVID=2). If the destination lies on another port (found through a normal forwarding table lookup), the
Switch then looks to see if the other port (Port 10) is a member of VLAN 2 (and can therefore receive VLAN 2
packets). If port 10 is not a member of VLAN 2, then the packet will be dropped by the Switch and will not
reach its destination. If Port 10 is a member of VLAN 2, the packet will go through. This selective forwarding
feature based on VLAN criteria is how VLANs segment networks. The key point being that Port 1 will only
transmit on VLAN 2, because it’s Port VLAN ID number is 2 (PVID=2).
Sharing Resources Across 802.1Q VLANs
Network resources such as printers and servers however, can be shared across 802.1Q VLANs. This is
achieved by setting up overlapping VLANs as shown in the diagram below.
VLAN 1
Port
VIDs = 1
VLAN 2
Port
VIDs = 2
Port
PVID = 3
VLAN 3
12
3
4
5
6
7
8
9 10 11 12
Graphics
Workstations
Workstations
Network
Server
Figure 5-4.
Example of typical VLAN configuration
In the above example, there are three different 802.1Q VLANs and each port can transmit packets on one of
them according to their Port VLAN ID (PVID). However, a port can receive packets on all VLANs (VID) that
it belongs to. The assignments are as follows:
PVID
(Port VLAN ID)
Ports
1
Port 1
1
Port 2
1
Port 3
2
Port 11
2
Port 12
3
Port 7
VID
(VLAN ID)
Member Ports
1
1,2,3,7