Enterasys Networks ELS10-27TX Switch User Manual


 
ELS10-27TX VLAN Configuration
A-3
A.2.2 PORTS IN VLAN
A port is made a member of the VLAN by the VLAN command. A port can be a
member of multiple VLAN IDs. If a packet is received without a tag, the default
VLAN for that port is applied to the packet. The default VLAN ID for a port is set
with the port command.
A.2.3 VLAN EGRESS
For hybrid ports, if a tag within the frame matches the PVID of the port, the tag
will be stripped. If a tag within the frame does not match the PVID, the frame will
be transmitted from the port.
For access ports, the tag will always be stripped.
A.2.4 VLAN ACCESS PORTS
Individual ELS10-27TX ports can be configured as one of two types for the
purpose of VLAN configuration: Access or Hybrid. A VLAN Access port is used
to connect one or more VLAN-unaware devices to the switch. VLAN tagged
frames are not allowed to enter or exit an Access port. If a tagged frame enters the
switch on an Access port, the switch will add the PVID to the frame and forward
the frame based on it. Only end-user stations which do not support 802.1Q tags
should be attached to ports on the switch configured as Access ports.
In Example 1 in Figure A-2, both ports are designated as Access ports. The ports
are both configured to be on VLAN X. An untagged frame (1) comes in through
the left port and gets tagged with a VLAN X tag (2), based on the incoming port
PVID. As the frame exits through the right port, the tag is stripped (3) since the
outgoing port is an Access port as well and can only transmit untagged frames.
The frame can propagate through the switch in this example only because both
ports are on the same VLAN.
In Example 2 in Figure A-2, both ports are also Access ports, however the port on
the left is on VLAN X while the port on the right is on VLAN Y. The untagged
frame (1) comes in through the left port and again gets tagged with a VLAN X tag
(2). However, because the outgoing port is on a different VLAN (VLAN Y), the
frame is dropped. In general, frames cannot propagate between ports unless both
ports belong to the same VLAN.