Zyxel GS-2024 EE — port-based VLAN Setup Guide: Configuration and Security [84/266]

Превью страниц Страница 84 / 266

Chapter 8 VLAN

GS-2024 User’s Guide

8.6 Port-based VLAN Setup

Port-based VLANs are VLANs where the packet forwarding decision is based on the

destination MAC address and its associated port.

Port-based VLANs require allowed outgoing ports to be defined for each port. Therefore, if

you wish to allow two subscriber ports to talk to each other, for example, between conference

rooms in a hotel, you must define the egress (an egress port is an outgoing port, that is, a port

through which a data packet leaves) for both ports.

Port-based VLANs are specific only to the Switch on which they were created.

" When you activate port-based VLAN, the Switch uses a default VLAN ID of 1.

You cannot change it.

" In screens (such as IP Setup) that require a VID, you must enter 1 as the VID.

The port-based VLAN setup screen is shown next. The CPU management port forms a VLAN

with all Ethernet ports.

8.6.1 Configure a Port-based VLAN

Select Port Based as the VLAN Type in the Switch Setup screen and then click VLAN

from the navigation panel to display the following screen. Select either All Connected or Port

Isolated from the drop-down list depending on your VLAN and VLAN security requirements.

If VLAN members need to communicate directly with each other, then select All Connected.

Select Port Isolated if you want to restrict users from communicating directly. Click Apply to

save your settings.

The following screen shows users on a port-based, all-connected VLAN configuration.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch

loses these changes if it is turned off or loses power, so use the Save link on the

top navigation panel to save your changes to the non-volatile memory when you

are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Table 17 Advanced Application > VLAN > VLAN Port Setting (continued)

LABEL DESCRIPTION