a virtual lan (vlan) is a logical network group that limits the broadcast domain. it allows you to isolate network traffic so only members of the vlan receive traffic from the same vlan members. basically, creating a vlan from a switch is logically equivalent of reconnecting a group of network devices to another layer 2 switch. however, all the network devices are still plug into the same switch physically.

    this switch supports both port-based and 802.1q (tagged-based) vlan in web management page.

    in the default configuration, vlan support is disabled.

   

    you have to reboot the switch for valid value every time you change the vlan mode.

    1 port-based vlan

   

    steps to create a new vlan group based on port-based vlan:

    (1) click add to create a new vlan group.

    (2) enter the vlan name, group id and select the members forthe new vlan.

    (3) click apply.

    (4) if there are many groups that over the limit of one page, you can click the “nextpage” to view other vlan groups.

    if the trunk group exists, you can see it (ex: trk1, trk2...) in select menu of ports, and you can configure it as the member of the vlan or not.

    2 802.1q vlan

    in this page, you can create tag-based vlan, and enable or disable gvrp protocol. there are 256 vlan groups to configure. enable 802.1q vlan, the all ports on the switch belong to default vlan, vid is 1. the default vlan can’t be deleted.

   

    gvrp (garp [generic attribute registration protocol] vlan registration protocol) gvrp allows automatic vlan configuration between the switch and nodes. if the switch is connected to a device with gvrp enabled, you can send a gvrp request using the vid of a vlan defined on the switch, then it will automatically add that device to the existing vlan.

    (1) basic

    create a vlan and add tagged member ports to it.

    1) from the main menu, click administrator-] vlan configuration, click add then you will see the page as follow.

    2) type a name for the new vlan.

    3) type a vid (between 2-4094). the default is 1.

    4) choose the protocol type.

    5) from the available ports box, select ports to add to the vlan and click “add ]]”. if the trunk group exists, you can see it here (ex: trk1,trk2…), and you can configure it as the member of the vlan or not.

    6) click next. then you can view the page as follow.

   

    7) use this page to set the outgoing frames as vlan-tagged frames or no. then click apply.

    tag: outgoing frames with vlan-tagged.

    untag: outgoing frames without vlan-tagged.

    (2) port vid

    configure port vid settings

    from the main tag-based (ieee 802.1q) vlan page, click port vid settings.

   

    port vid (pvid)

    set the port vlan id that will be assigned to untagged traffic on a given port. this feature is useful for accommodating devices that you want to participate in the vlan but that don’t support tagging. each port of this switch allows user to set one pvid, the range is 1～255, default pvid is 1. the pvid must be the same as the vlan id the port belongs to, or the untagged traffic will be dropped.

    ingress filtering

    ingress filtering lets frames belonging to a specific vlan to be forwarded if the port belongs to that vlan. this switch have two ingress filtering rule as follows:

    ingress filtering rule 1: forward only packets with vid matching this port's configured vid.

    ingress filtering rule 2: drop untagged frame.