VLAN division methods and advantages and disadvantages

Port-based VLAN Division is the simplest and most effective VLAN division method. It defines VLAN members based on LAN switch ports.

1. Port-based VLAN

Port-based VLAN Division is the simplest and most effective VLAN division method. It defines VLAN members based on LAN switch ports. VLAN logically separates the ports of LAN switches, thus dividing the terminal system into different parts. Each part is relatively independent and functional simulation of the traditional LAN. A port-based VLAN is divided into two scenarios: a single switch port and a multi-switch port defining a VLAN:

(1) Multi-switch port definition VLAN

As shown in 3, Ports 1, 2, and 3 of vswitch 1 and ports 4, 5, and 6 of vswitch 2 constitute VLAN1, VLAN2.

(2) single switch port definition VLAN

As shown in figure 2, Ports 1, 2, 6, 7, and 8 of the vswitch form VLAN1, ports 3, 4, and 5 constitute VLAN2. this VLAN only supports one vswitch.

The division of port-based VLANs is simple and effective, but the disadvantage is that when a user moves from one port to another, the network administrator must reconfigure the VLAN members.

2. MAC address-based VLAN

A VLAN based on a MAC address is a VLAN defined by the MAC address of the terminal system. a mac address is actually the identifier of the network card. The MAC address of each network card is unique. This method allows the workstation to move to other physical network segments of the network and automatically retains the original VLAN membership. When the network size is small, this solution can be said to be a good method, but with the expansion of the network size and the increase of network devices and users, it will greatly increase the difficulty of management.

3. Routing-based VLAN

The routing protocol works at the Layer 2-network layer of the layer 7 protocol, such as IP and IPX-based routing protocols. Such devices include routers and routing switches. This method allows a VLAN to span multiple switches or a port to be in multiple VLANs. In a VLAN divided by IP address, it is easy to implement routing, that is, integrating the switching and routing functions into VLAN switches. This method not only achieves the basic goal of VLAN control of broadcast storms, but also does not require external routers. However, this method is not ideal for the communication speed between VLAN members.

4. Policy-based VLAN

Policy-based VLAN division is an effective and direct method, mainly depending on the policies used in VLAN division.