Difference between revisions of "SwitchOS/CF-SW-VLAN-Example"
(Created page with "{{ Note | These are basic VLAN configuration examples, in case you need more advanced options (e.g. ingress VLAN filtering, VLAN mirroring) then please refer to SwitchOS/CRS...") |
|||
Line 7: | Line 7: | ||
1) In VLAN menu configure Default VLAN ID on planned access ports to assign untagged traffic to specific VLAN in the switch. | 1) In VLAN menu configure Default VLAN ID on planned access ports to assign untagged traffic to specific VLAN in the switch. | ||
<br/> | <br/> | ||
[[File: | [[File:vlane1_CF-SW.png|alt=Alt text|Access Ports|center|frame]] | ||
<br/> | <br/> | ||
2) In VLANs menu add VLAN entries and specify port membership to certain VLANs. | 2) In VLANs menu add VLAN entries and specify port membership to certain VLANs. | ||
<br/> | <br/> | ||
[[File: | [[File:vlane2_CF-SW.png|alt=Alt text|VLAN Membership|center|frame]] | ||
<br/> | <br/> | ||
3) At the end, enable strict VLAN filtering to ensure only allowed VLANs can pass through the ports. | 3) At the end, enable strict VLAN filtering to ensure only allowed VLANs can pass through the ports. | ||
<br/> | <br/> | ||
[[File: | [[File:vlane3_CF-SW.png|alt=Alt text|VLAN Filtering|center|frame]] | ||
<br/> | <br/> | ||
Line 23: | Line 23: | ||
<br/> | <br/> | ||
1) In VLAN menu configure Default VLAN ID on planned hybrid ports to assign untagged traffic to specific VLAN in the switch. | 1) In VLAN menu configure Default VLAN ID on planned hybrid ports to assign untagged traffic to specific VLAN in the switch. | ||
[[File: | [[File:vlane1_CF-SW.png|alt=Alt text|Default VLAN ID for untagged traffic|center|frame]] | ||
<br/> | <br/> | ||
2) In VLANs menu add VLAN entries and specify port membership to certain VLANs. Just like the previous example, add ports with untagged traffic (defined by Default VLAN ID) to certain VLAN (black arrows). Also, we need to add ports, which are allowed to forward tagged traffic. | 2) In VLANs menu add VLAN entries and specify port membership to certain VLANs. Just like the previous example, add ports with untagged traffic (defined by Default VLAN ID) to certain VLAN (black arrows). Also, we need to add ports, which are allowed to forward tagged traffic. | ||
Line 29: | Line 29: | ||
<br/> | <br/> | ||
3) At the end, enable strict VLAN filtering to ensure only allowed VLANs can pass through the ports. For hybrid ports to work properly, make sure VLAN Receive is selected as <code>any</code>, otherwise ingress tagged or untagged traffic can be dropped (depending on selected option), but for the trunk port, it is possible to allow only packets with VLAN tag. To filter specific ingress VLAN traffic on hybrid ports, use [[SwitchOS/CSS326#ACL_Tab | ACL rules]]. | 3) At the end, enable strict VLAN filtering to ensure only allowed VLANs can pass through the ports. For hybrid ports to work properly, make sure VLAN Receive is selected as <code>any</code>, otherwise ingress tagged or untagged traffic can be dropped (depending on selected option), but for the trunk port, it is possible to allow only packets with VLAN tag. To filter specific ingress VLAN traffic on hybrid ports, use [[SwitchOS/CSS326#ACL_Tab | ACL rules]]. | ||
[[File: | [[File:vlane3_CF-SW.png|alt=Alt text|VLAN Filtering|center|frame]] | ||
<br/> | <br/> |
Revision as of 11:47, 2 September 2020
Note: These are basic VLAN configuration examples, in case you need more advanced options (e.g. ingress VLAN filtering, VLAN mirroring) then please refer to VLAN Manual for a more detailed property description.
VLAN Example #1 (Trunk and Access Ports)
1) In VLAN menu configure Default VLAN ID on planned access ports to assign untagged traffic to specific VLAN in the switch.
2) In VLANs menu add VLAN entries and specify port membership to certain VLANs.
3) At the end, enable strict VLAN filtering to ensure only allowed VLANs can pass through the ports.
VLAN Example #2 (Trunk and Hybrid Ports)
1) In VLAN menu configure Default VLAN ID on planned hybrid ports to assign untagged traffic to specific VLAN in the switch.
2) In VLANs menu add VLAN entries and specify port membership to certain VLANs. Just like the previous example, add ports with untagged traffic (defined by Default VLAN ID) to certain VLAN (black arrows). Also, we need to add ports, which are allowed to forward tagged traffic.
3) At the end, enable strict VLAN filtering to ensure only allowed VLANs can pass through the ports. For hybrid ports to work properly, make sure VLAN Receive is selected as any
, otherwise ingress tagged or untagged traffic can be dropped (depending on selected option), but for the trunk port, it is possible to allow only packets with VLAN tag. To filter specific ingress VLAN traffic on hybrid ports, use ACL rules.