210 likes | 374 Views
Module 8. Virtual LANs. What is a Virtual LAN (VLAN)?. Logical grouping not dependent on physical location Operate at layer 2 & 3 VLANS do not forward broadcasts. TO IMPLEMENT VLANS:. 1. PORT-CENTRIC make port 1 VLAN 1, port 2 VLAN 2, etc. Easier to administer, easier to set-up
E N D
Module 8 Virtual LANs
What is a Virtual LAN (VLAN)? • Logical grouping not dependent on physical location • Operate at layer 2 & 3 • VLANS do not forward broadcasts
TO IMPLEMENT VLANS: 1. PORT-CENTRIC • make port 1 VLAN 1, port 2 VLAN 2, etc. • Easier to administer, easier to set-up • not secure cause you can physically move cable • EACH VLAN IS A SEPARATE BROADCAST DOMAIN 2. DYNAMIC VLANS • based on intelligent mgmt. Software • more work up front • admin has to type in addresses • based on MAC, logical addr., or protocol type • even w/ a hub on 1 port w/ workstations, they are all on 1 VLAN
VLANS • SWITCHES ARE CORE COMPONENT OF VLANS • VLANS can’t talk to each other, have to use router
VLAN Configuration and Topology • Trend: Growing use of switches and virtual LANs (VLANs) • VLANs require switches that have Layer 3 (IP) addressing capabilities
What Is a Virtual LAN (VLAN)? • Logical networks independent of their members’ physical location • Administratively defined broadcast domain • Users reassigned to different VLAN using software Administration Engineering Marketing
VLAN Benefits • Reduces administration costs • Manages broadcast domain sizes • Offers security because routers provide communication and firewalls between VLAN groups • Logical groupings of users VLAN Group 1 VLAN Group 2
Switches and routers each play an important role in VLAN design. Switches are the core device that controls individual VLANs while routers provide interVLAN communication
The Role of the Router in VLANS • Policy-based control • Broadcast management • Route processing & distribution • Provide the communication between VLANs. • Provide VLAN access to shared resources, such as servers & hosts.
What is a Virtual LAN (VLAN)? • Logical grouping not dependent on physical location • Operate at layer 2 & 3 • VLANS do not forward broadcasts
TO IMPLEMENT VLANS: 1. PORT-CENTRIC • make port 1 VLAN 1, port 2 VLAN 2, etc. • Easier to administer, easier to set-up • not secure cause you can physically move cable • EACH VLAN IS A SEPARATE BROADCAST DOMAIN 2. DYNAMIC VLANS • based on intelligent mgmt. Software • more work up front • admin has to type in addresses • based on MAC, logical addr., or protocol type • even w/ a hub on 1 port w/ workstations, they are all on 1 VLAN
VLANS • SWITCHES ARE CORE COMPONENT OF VLANS • VLANS can’t talk to each other, have to use router
VLAN Configuration and Topology • Trend: Growing use of switches and virtual LANs (VLANs) • VLANs require switches that have Layer 3 (IP) addressing capabilities
What Is a Virtual LAN (VLAN)? • Logical networks independent of their members’ physical location • Administratively defined broadcast domain • Users reassigned to different VLAN using software Administration Engineering Marketing
VLAN Benefits • Reduces administration costs • Manages broadcast domain sizes • Offers security because routers provide communication and firewalls between VLAN groups • Logical groupings of users VLAN Group 1 VLAN Group 2
Switches and routers each play an important role in VLAN design. Switches are the core device that controls individual VLANs while routers provide interVLAN communication
The Role of the Router in VLANS • Policy-based control • Broadcast management • Route processing & distribution • Provide the communication between VLANs. • Provide VLAN access to shared resources, such as servers & hosts.
Module 8 Virtual LANs