Vlan membership, Default vlan, Port-based vlans – Dell PowerEdge FX2/FX2s User Manual

Page 96: Vlans and port tagging

Advertising
background image

VLAN Membership

A virtual LAN (VLANs) is a logical broadcast domain or logical grouping of interfaces in a LAN in which all
data received is kept locally and broadcast to all members of the group. In Layer 2 mode, VLANs move
traffic at wire speed and can span multiple devices. Dell Networking OS supports up to 4093 port-based
VLANs and one default VLAN, as specified in IEEE 802.1Q.
VLAN provide the following benefits:

• Improved security because you can isolate groups of users into different VLANs.

• Ability to create one VLAN across multiple devices.
On an Aggregator in standalone mode, all ports are configured by default as members of all (4094)
VLANs, including the default VLAN. All VLANs operate in Layer 2 mode. You can reconfigure the VLAN
membership for individual ports by using the vlan tagged or vlan untagged commands in
INTERFACE configuration mode (Configuring VLAN Membership). Physical Interfaces and port channels
can be members of VLANs.

NOTE: You can assign a static IP address to default VLAN 1 using the ip address command. To

assign a different VLAN ID to the default VLAN, use the default vlan-id vlan-id command.

Following table lists out the VLAN defaults in Dell Networking OS:

Feature

Default

Mode

Layer 2 (no IP address is assigned)

Default VLAN ID

VLAN 1

Default VLAN

When an Aggregator boots up, all interfaces are up in Layer 2 mode and placed in the default VLAN as

untagged interfaces. Only untagged interfaces can belong to the default VLAN.
By default, VLAN 1 is the default VLAN. To change the default VLAN ID, use the default vlan-id <1–
4094
> command in CONFIGURATION mode. You cannot delete the default VLAN.

Port-Based VLANs

Port-based VLANs are a broadcast domain defined by different ports or interfaces. Dell Networking OS

supports 4094 port-based VLANs.
Port-based VLANs offer increased security for traffic, conserve bandwidth, and allow switch
segmentation. Interfaces in different VLANs do not communicate with each other, adding some security
to the traffic on those interfaces. Different VLANs can communicate between each other by means of IP
routing. Because traffic is only broadcast or flooded to the interfaces within a VLAN, the VLAN conserves
bandwidth. Finally, you can have multiple VLANs configured on one switch, thus segmenting the device

Interfaces within a port-based VLAN must be in Layer 2 mode and can be tagged or untagged in the
VLAN ID.

VLANs and Port Tagging

To add an interface to a VLAN, it must be in Layer 2 mode. After you place an interface in Layer 2 mode, it
is automatically placed in the default VLAN. Dell Networking OS supports IEEE 802.1Q tagging at the

96

Interfaces

Advertising