Advanced Configuration Options 48
Model 3202 User Manual 4 • Web configuration
• Untagged VLANs - Untagged (or static) VLANs are typically used to reduce broadcast traffic and to
increase security. A group of network users assigned to a VLAN form a broadcast domain that is separate
from other VLANs configured on the Model 3202. Packets are forwarded only between ports that are des-
ignated for the same VLAN. Untagged VLANs can be used to manually isolate user groups or subnets.
• Port VID (PVID) - A PVID is a VLAN ID assigned to untagged frames received on the interface. (Default:
1). If an interface is not a member of VLAN 1 and you assign its PVID to this VLAN, the interface will
automatically be added to VLAN 1 as an untagged member. For all other VLANs, an interface must first be
configured as an untagged member before you can assign its PVID to that group.
• Link Type - The Link Type determines the types of frames the port can accept. Access means the port can
only receive or send untagged frame types. Trunk means that the port can only receive or send tagged frame
types.
Port-Based VLAN
Click on VLAN under Advanced on the main menu to reach the VLAN advanced configuration page. Then,
select the radio button for Port-Based VLAN to display the configuration options.
Figure 19. Port-Based VLAN page
Port-Based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address
and its associated port. When using port-based VLAN, the port is assigned to a specific VLAN independent of
the user or system attached to the port. This means all users attached to the port should be members in the
same VLAN. The network administrator typically performs the VLAN assignment. The port configuration is
static and cannot be automatically changed to another VLAN without manual reconfiguration.
As with other VLAN approaches, the packets forwarded using this method do not leak into other VLAN
domains on the network. After a port has been assigned to a VLAN, the port cannot send to or receive from
devices in another VLAN.