Allied Telesis AT-S63 - Manual (Page 602)

Chapter 25: Port-based and Tagged VLANs
602 Section VI: VLANs
Guidelines to
Creating a Port-
based VLAN
Below are the guidelines to creating a port-based VLAN.
ˆ Each port-based VLAN must be assigned a unique VID. If a particular
VLAN spans multiples switches, each part of the VLAN on the different
switches should be assigned the same VID.
ˆ A port can be an untagged member of only one port-based VLAN at a
time.
ˆ A port must be assigned a PVID. This value must be the same for all
ports in a port-based VLAN and it must match the VLAN’s VID. This
value is automatically assigned by the AT-S63 management software.
ˆ A port-based VLAN that spans multiple switches requires a port on
each switch where the VLAN is located to function as an
interconnection between the switches where the various parts of the
VLAN reside.
ˆ If there are end nodes in different VLANs that need to communicate
with each other, a router or Layer 3 switch is required to interconnect
the VLANs.
ˆ The switch can support up to a total of 4094 port-based, tagged,
protected ports, and MAC address-based VLANs. (MAC address-
based VLANs are supported only on the AT-9424Ti/SP switch.)
ˆ A port set to the 802.1x authenticator or supplicant role must be
changed to the none role before you can change its untagged VLAN
assignment. After the VLAN assignment is made, the port’s role can
be changed back again to authenticator or supplicant, if desired.
ˆ You cannot delete the Default VLAN from the switch.
ˆ Deleting an untagged port from the Default VLAN without assigning it
to another VLAN results in the port being an untagged member of no
VLAN.
Drawbacks of
Port-based
VLANs
There are several drawbacks to port-based VLANs:
ˆ It is not easy to share network resources, such as servers and printers,
across multiple VLANs. A router or Layer 3 switch must be added to
the network to provide a means for interconnecting the port-based
VLANs. The introduction of a router into your network could create
security issues from unauthorized access to your network.
ˆ A VLAN that spans several switches requires a port on each switch for
the interconnection of the various parts of the VLAN. For example, a
VLAN that spans three switches would require one port on each switch
to interconnect the various sections of the VLAN. In network
configurations where there are many individual VLANs that span
switches, many ports could end up being used ineffectively just to
interconnect the various VLANs.