This document introduces how to divide 802.1Q VLANs based on examples.
Example: as shown in the preceding figure, the marketing department and product department of a company set up network isolation. The two departments can access the Internet and servers of their respective departments, but mutual access between departments and servers of other departments is prohibited.
In this example, the actual topology and port connection effect are as follows. This article describes how to divide VLANs based on this instance:
Based on the 802.1Q VLAN mechanism, you can divide the following VLANs to meet your requirements:
|
VSwitch
|
VLAN ID
|
Included Port
|
|
VSwitch 1
|
20
|
1 ~ 12 (marketing department), 25 (servers), 26 (internet access)
|
|
30
|
13 ~ 24 (product department), 25 (servers), 26 (internet access)
|
|
2
|
1 ~ 24 (Internet computer), 26 (router connection)
|
|
VSwitch 2
|
20
|
1 ~ 3 (Marketing Department server), 25 (Connect to switch 1)
|
|
30
|
4 ~ 6 (product server), 25 (Connect to switch 1)
|
Note:Port 25 is a cross-switch VLAN cascade port and requires a tag. Other ports are connected to the host, so no tag is added.
Because the vSwitch supports port management with PVID 1 by default, we recommend that you keep a port for management.
On the logon management page, go
In VLAN> 802.1Q VLAN, create VLAN20, VLAN30, and VLAN2, respectively, as follows:
Select the market department VLAN and select the port according to the VLAN plan. The PVID of the marketing department is 20, and only port 25 needs to be marked as tagged. The PVID of port 26 needs to be 2, as shown in the figure below:
Note:Port 25 serves as the tag (Trunk) interface, and its PVID has no practical effect. The default value is 1.
Click
Submit.
Add VLAN30 as follows:
Add VLAN2 as follows:
After the VLAN is added, the VLAN list is as follows:
On the logon management page, go
VLAN> 802.1Q VLANTo create VLAN20 and VLAN30, as shown below:
Select the corresponding port according to the VLAN division schedule, as follows:
So far, the VLAN division on the two switches has been completed, and both the marketing department and the product department have met the requirements.
Under what conditions
Tagged
?
The output data of the Tagged port carries the 802.1Q TAG, that is, the VLAN information, which is mainly used in the uplink interface of the cross-switch VLAN, that is, the Trunk port. If it is used to connect a host, router, or other devices, select untagged.
