Shulou(Shulou.com)06/02 Report--

This article will explain in detail about the six vlan division methods, the editor thinks it is very practical, so share it for you to do a reference, I hope you can get something after reading this article.

Vlan division methods are: 1, based on port division; 2, based on MAC address division; 3, based on network layer protocol division; 4, according to IP multicast division; 5, by policy division; 6, by user definition, non-user authorization division.

The vlan division methods are:

1. VLAN based on port division

This is the most commonly used VLAN partition method, and it is also the most widely used and most effective. At present, most VLAN switches provide this VLAN configuration method. This method of dividing VLAN is divided according to the switching port of the Ethernet switch. it divides the physical port on the VLAN switch and the PVC (permanent virtual circuit) port inside the VLAN switch into several groups, each group forming a virtual network, which is equivalent to an independent VLAN switch.

When different departments need to visit each other, it can be forwarded through the router and combined with port filtering based on MAC address. Set the set of MAC addresses that can be passed on the appropriate port of the switch, routing switch, or router closest to the site on the access path to the site. This prevents illegal intruders from stealing IP addresses from within and invading from other accessible points.

From this partitioning method itself, we can see that the advantage of this partitioning method is that it is very simple to define VLAN members, as long as all ports are defined as corresponding VLAN groups. Suitable for networks of any size. Its disadvantage is that if a user leaves the original port and goes to a port on a new switch, it must be redefined.

2. Divide VLAN based on MAC address

This method of dividing VLAN is divided according to the MAC address of each host, that is, the host with each MAC address is configured which group he belongs to. Its mechanism is that each network card corresponds to a unique MAC address, and the VLAN switch tracks the address belonging to VLAN MAC. VLAN in this way allows network users to automatically retain their membership of the VLAN to which they belong when they move from one physical location to another.

From this partition mechanism, we can see that the biggest advantage of this VLAN partition method is that when the user's physical location moves, that is, when switching from one switch to another, the VLAN does not have to be reconfigured, because it is based on the user, not the switch port. The disadvantage of this method is that during initialization, all users must be configured, and if there are hundreds or even thousands of users, the configuration is very tiring, so this partition method is usually suitable for small Lans. And this partition method also leads to the reduction of switch execution efficiency, because there may be many VLAN group members in each switch port, and many users' MAC addresses are saved, which is not easy to query. In addition, for laptop users, their network cards may be changed frequently, so VLAN must be configured frequently.

3. Divide VLAN based on network layer protocol.

According to the network layer protocols, VLAN can be divided into IP, IPX, DECnet, AppleTalk, Banyan and other VLAN networks. This kind of VLAN, which is composed according to the network layer protocol, enables the broadcast domain to span multiple VLAN switches. This is very attractive for network administrators who want to organize users for specific applications and services. Moreover, users can move freely within the network, but their VLAN membership remains unchanged.

The advantage of this method is that the physical location of the user has changed, there is no need to reconfigure the VLAN, and the VLAN can be divided according to the type of protocol, which is very important to the network manager, and this method does not need additional frame tags to identify the VLAN, which can reduce the traffic of the network. The disadvantage of this method is low efficiency, because checking the network layer address of each packet takes processing time (compared with the previous two methods). The general switch chip can automatically check the Ethernet header of packets on the network, but it takes more technology and time-consuming to enable the chip to check the IP frame header. Of course, this has something to do with the implementation methods of each vendor.

4. Divide VLAN according to IP Multicast

IP Multicast is actually a definition of VLAN, that is, an IP Multicast Group is a VLAN. This partition method extends the VLAN to the wide area network, so this method has more flexibility, and it is also easy to expand through the router. It is mainly suitable for local area network users who are not in the same geographical area to form a VLAN, but not suitable for local area network, mainly because it is inefficient.

5. Divide VLAN by policy

VLAN based on policy can implement a variety of allocation methods, including VLAN switch port, MAC address, IP address, network layer protocol and so on. Network managers can decide which type of VLAN to choose according to their own management model and the needs of their own units.

6. VLAN is divided by user definition and non-user authorization.

The division of VLAN based on user definition and non-user authorization means that in order to adapt to the special VLAN network, VLAN is defined and designed according to the special requirements of specific network users, and non-VLAN users can access VLAN, but they need to provide user passwords and can join a VLAN only after being authenticated by VLAN management.

This is the end of this article on "6 vlan division methods". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, please share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.