C
HAPTER
6
| VLAN Configuration
Protocol VLANs
– 187 –
PROTOCOL VLANS
The network devices required to support multiple protocols cannot be
easily grouped into a common VLAN. This may require non-standard
devices to pass traffic between different VLANs in order to encompass all
the devices participating in a specific protocol. This kind of configuration
deprives users of the basic benefits of VLANs, including security and easy
accessibility.
To avoid these problems, you can configure this switch with protocol-based
VLANs that divide the physical network into logical VLAN groups for each
required protocol. When a frame is received at a port, its VLAN
membership can then be determined based on the protocol type being
used by the inbound packets.
COMMAND USAGE
◆ To configure protocol-based VLANs, follow these steps:
1. First configure VLAN groups for the protocols you want to use
(page 849). Although not mandatory, we suggest configuring a
separate VLAN for each major protocol running on your network.
Do not add port members at this time.
2. Create a protocol group for each of the protocols you want to assign
to a VLAN using the Configure Protocol (Add) page.
3. Then map the protocol for each interface to the appropriate VLAN
using the Configure Interface (Add) page.
◆ When MAC-based, IP subnet-based, and protocol-based VLANs are
supported concurrently, priority is applied in this sequence, and then
port-based VLANs last.
CONFIGURING
PROTOCOL VLAN
GROUPS
Use the VLAN > Protocol (Configure Protocol - Add) page to create protocol
groups.
CLI REFERENCES
◆ "protocol-vlan protocol-group (Configuring Groups)" on page 865
PARAMETERS
These parameters are displayed in the web interface:
◆ Frame Type – Choose either Ethernet, RFC 1042, or LLC Other as the
frame type used by this protocol.
◆ Protocol Type – Specifies the protocol type to match. The available
options are IP, ARP, RARP and IPv6. If LLC Other is chosen for the
Frame Type, the only available Protocol Type is IPX Raw.
◆ Protocol Group ID – Protocol Group ID assigned to the Protocol VLAN
Group. (Range: 1-2147483647)