Configuration: VLAN
Overview
This section provides information for VLAN in Configuration.
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group. With VLAN, a device cannot directly talk to or hear from devices that are not in the same groups; the traffic must first go through a router.
In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and security among the subscribers. When properly configured, VLAN prevents one subscriber from accessing the network resources of another on the same LAN, therefore a user will not see the printers and hard disks of another user on the same network.
VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain.
VLAN Settings
Use this screen to view and configure VLAN settings.
VLAN
Use this screen to view VLAN settings. Click Configuration > VLAN > VLAN > VLAN.
The following table describes the labels in this screen.
Configuration > VLAN > VLAN > VLAN 
Label
Description
VLAN
VLAN ID
Displays the VLAN ID number.
VLAN Name
Displays a descriptive name for the VLAN group for identification purposes. This name consists of up to 64 printable characters; spaces are allowed.
VLAN Type
Displays Default or Static.
Action
Edit
Click Edit to make changes to the entry.
Add
Click Add to create a new VLAN entry.
VLAN Add
Use this screen to add a VLAN. Click Configuration > VLAN > VLAN > VLAN > Add.
The following table describes the labels in this screen.
Configuration > VLAN > VLAN > VLAN > Add 
Label
Description
VLAN
VLAN List
Enter the VLAN ID numbers.
Use a dash to associate consecutive VLANs and a comma (no spaces) to associate non-consecutive VLANs. For example, 51–53 includes 51, 52 and 53, but 51,53 does not include 52.
VLAN Name Prefix
Enter a prefix for the VLAN name.
Apply
Click Apply to save the changes.
Cancel
Click Cancel to discard the changes.
Port Settings
Use this screen to view port settings and select VLANs for configuration. Click Configuration > VLAN > VLAN > Port.
The following table describes the labels in this screen.
Configuration > VLAN > VLAN > Port 
Label
Description
Port
Port
Displays the port index number.
PVID
A PVID (Port VLAN ID) is a tag that adds to incoming untagged frames received on a port so that the frames are forwarded to the VLAN group that the tag defines.
Accept Frame Type
Specify the type of frames allowed on a port. Choices are All, Tag Only and Untag Only.
Ingress Check
If this checkbox is selected for a port, the Switch discards incoming frames for VLANs that do not include this port in its member set.
VLAN Trunk
Enable VLAN Trunking on ports connected to other switches or routers (but not ports directly connected to end users) to allow frames belonging to unknown VLAN groups to pass through the Switch.
Edit
Select this checkbox to configure the properties of a port. Click the Edit button change the properties of the port.
Cancel
Click Cancel to discard the changes.
Port Edit
Use this screen to configure port settings. Click Configuration > VLAN > VLAN > Port > Edit.
The following table describes the labels in this screen.
Configuration > VLAN > VLAN > Port > Edit 
Label
Description
Port
Port Select
Displays the list of port index numbers that are being configured.
PVID
Enter a number between 1 and 4094 as the port VLAN ID.
Accepted Type
Select All from the drop-down list box to accept all untagged or tagged frames on this port. This is the default setting.
Select Tag Only to accept only tagged frames on this port. All untagged frames will be dropped.
Select Untag Only to accept only untagged frames on this port. All tagged frames will be dropped.
Ingress Filtering
If this checkbox is selected for a port, the Switch discards incoming frames for VLANs that do not include this port in its member set.
Clear this checkbox to disable ingress filtering.
VLAN Trunk
Enable VLAN Trunking on ports connected to other switches or routers (but not ports directly connected to end users) to allow frames belonging to unknown VLAN groups to pass through the Switch.
Apply
Click Apply to save the changes.
Cancel
Click Cancel to discard the changes.
VLAN Port
Port-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. Port-based VLANs require allowed outgoing ports to be defined for each port. Therefore, if you wish to allow two subscriber ports to talk to each other, for example, between conference rooms in a hotel, you must define the egress (an egress port is an outgoing port, that is, a port through which a data packet leaves) for both ports. Port-based VLANs are specific only to the Switch on which they were created.
Use this screen to view VLAN port settings. Click Configuration > VLAN > VLAN > VLAN Port.
The following table describes the labels in this screen.
Configuration > VLAN > VLAN > VLAN Port 
Label
Description
VLAN Port
VLAN ID
Select the ID of the VLAN you want to configure.
Port
Displays the port index value.
Membership
Select Forbidden if you want to prohibit the port from joining this VLAN group.
Select Excluded to remove the port from the VLAN.
Select Tagged to set the port TX tag status to tagged in the VLAN.
Select Untagged to set the port TX tag status to untagged in the VLAN.
Apply
Click Apply to save the changes.
Cancel
Click Cancel to discard the changes.
Guest VLAN
When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the correct credentials are blocked from using the ports. You can configure your Switch to have one VLAN that acts as a guest VLAN. If you enable the guest VLAN on a port , the user that is not IEEE 802.1x capable or fails to enter the correct user name and password can still access the port, but traffic from the user is forwarded to the guest VLAN. That is, unauthenticated users can have access to limited network resources in the same guest VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the network administrator configures switches or routers with the guest network feature.
Use this screen to view and configure guest VLAN settings.
Global Settings
Use this screen to configure the global Guest VLAN settings. Click Configuration > VLAN > Guest VLAN.
The following table describes the labels in this screen.
Configuration > VLAN > Guest VLAN > Global 
Label
Description
Global
State
Select to enable the global Guest VLAN feature.
Guest VLAN ID
Enter the global guest VLAN ID.
Apply
Click Apply to save the changes.
Cancel
Click Cancel to discard the changes.
Port Settings
Use this screen to view the Guest VLAN port settings and select VLAN ports for configuration. Click Configuration > VLAN > Guest VLAN > Port.
The following table describes the labels in this screen.
Configuration > VLAN > Guest VLAN > Port 
Label
Description
Port
Port
Displays the port index number.
State
Display the state of the selected port.
Edit
Select this checkbox to configure the properties of a port. Click the Edit button change the properties of the port.
Cancel
Click Cancel to discard the changes.
Port Edit
Use this screen to configure the guest VLAN port EEE settings. Click Configuration > VLAN > Guest VLAN > Port > Edit.
The following table describes the labels in this screen.
Configuration > VLAN > Guest VLAN > Port > Edit
Label
Description
Port
Port List
Displays the list of port index numbers that are being configured.
State
Enable/Disable the guest VLAN feature.
Apply
Click Apply to save the changes.
Cancel
Click Cancel to discard the changes.
Voice VLAN
The Voice VLAN feature enables voice traffic forwarding on the Voice VLAN, then the switch can classify and schedule network traffic. It is recommended that there be two VLANs on a port – one for voice, one for data.
Use this screen to view and configure voice VLAN settings.
Global Settings
Use this screen to configure the global Voice VLAN settings. Click Configuration > VLAN > Voice VLAN > Global.
The following table describes the labels in this screen.
Configuration > VLAN > Voice VLAN > Global 
Label
Description
Global
State
Select Enable to activate the global voice VLAN feature.
Voice VLAN ID
Enter the global voice VLAN ID. It should be a unique VLAN ID in the system and cannot equal each port PVID. It is a conflict in configuration if the value equals management VID, MVR VID, PVID, and so on. The allowed range is 1 to 4094.
Cos/802.1p
Displays the 802.1p packet priority field.
Remark Cos/802.1p
Select to Enable the priority remark function for cos/802.1p.
Aging Time
Enter the voice VLAN secure learning aging time. The allowed range is 10 to 10000000 seconds. It is used when security mode or auto detect mode is enabled. In other cases, it will be based on hardware aging time. The actual aging time will be situated between the [age_time; 2 * age_time] interval.
Apply
Click Apply to save the changes.
Cancel
Click Cancel to discard the changes.
OUI Settings
Use this screen to view the OUI settings. The maximum number of entries is 16. Modifying the OUI table will restart auto detection of OUI process. Click Configuration > VLAN > Voice VLAN > OUI.
The following table describes the labels in this screen.
Configuration > VLAN > Voice VLAN > OUI
Label
Description
OUI
OUI Address
Displays an OUI address. A telephony OUI address is a globally unique identifier assigned to a vendor by IEEE. It must be 6 characters long and the input format is "xx-xx-xx" (x is a hexadecimal digit).
Description
Displays a description of the OUI address. Normally, it describes which vendor telephony device it belongs to. The allowed string length is 0 to 32.
Action
Edit
Click Edit to make changes to the entry.
Delete
Click Delete to remove the entry.
Add
Click Add to create a new OUI entry.
OUI Add or Edit
Use this screen to add or edit an OUI address. Click Configuration > VLAN > Voice VLAN > OUI > Add or Edit.
The following table describes the labels in this screen.
Configuration > VLAN > Voice VLAN > OUI > Add or Edit
Label
Description
Add/Edit OUI
OUI Address
Enter an OUI address. A telephony OUI address is a globally unique identifier assigned to a vendor by IEEE. It must be 6 characters long and the input format is "xx-xx-xx" (x is a hexadecimal digit).
Description
Enter a description of the OUI address. Normally, it describes which vendor telephony device it belongs to. The allowed string length is 0 to 32.
Apply
Click Apply to save the changes.
Cancel
Click Cancel to discard the changes.
Port Settings
Use this screen to view the Voice VLAN port settings and select a port for configuration. Click Configuration > VLAN > Voice VLAN > Port.
The following table describes the labels in this screen.
Configuration > VLAN > Voice VLAN > Port 
Label
Description
Port
Port
Displays the port index value.
State
Displays the Voice VLAN port security mode state. When the function is enabled, all non-telephonic MAC addresses in the Voice VLAN will be blocked for 10 seconds. Possible port modes are:
• Enabled: Enable Voice VLAN security mode operation.
• Disabled: Disable Voice VLAN security mode operation.
Edit
Select this checkbox to configure the properties of a port. Click the Edit button change the properties of the port.
Cancel
Click Cancel to discard the changes.
Port Edit
Use this screen to edit the ports security state. Click Configuration > VLAN > Voice VLAN > Port > Edit.
The following table describes the labels in this screen.
Configuration > VLAN > Voice VLAN > Port > Edit 
Label
Description
Port
Port
Displays the ports index value.
State
Select the Voice VLAN port security mode state. When the function is enabled, all non-telephonic MAC addresses in the Voice VLAN will be blocked for 10 seconds. Possible port modes are:
• Enabled: Enable Voice VLAN security mode operation.
• Disabled: Disable Voice VLAN security mode operation.
Apply
Click Apply to save the changes.
Cancel
Click Cancel to discard the changes.