Multiple VLAN
Multiple VLAN
1. Function Overview
Multiple VLAN allows you to divide ports belonging to the same VLAN into multiple groups and block communication between the groups.
In addition to dividing ports into multiple groups, you can also have one port participate in multiple groups.
This function allows users to easily realize the needs such as those shown in the diagram, where communication between terminals needs to be blocked while each terminal can access the server.
-
Example of using multiple VLANs
3. Function Details
3.1. Basic operating specifications
Multiple VLAN allows you to create groups within a VLAN.
Use the switchport multiple-vlan group command to configure a multiple VLAN group.
Multiple VLANs can be configured on LAN interfaces and link aggregation logical interfaces.
If you wish to configure a multiple VLAN group for a trunk port, this will be applied to all relevant VLANs that belong to the port in question.
The multiple VLAN group settings will also be applied to a multicast frame (*1).
The maximum number of groups is equal to the number of ports on the product.
(*1): The following frames are forwarded to ports with different multiple VLAN groups.
-
L2MS control frame
-
Control frames used by Yamaha wireless access points
-
BPDU frame when BPDU pass through is enabled
3.2. Examples of traffic between multiple VLAN groups
When using multiple VLAN group settings (Group #1 through #4) as shown in the diagram above, enabling/disabling traffic between specific ports A/B and the reasons for such as shown in the table below.
Port number A (group) | Port number B (group) | Traffic enable/disable | Reason |
---|---|---|---|
port1.1 (Group 1) |
port1.2 (Group 2) |
Disabled |
The multiple VLAN group is different |
port1.1 (Group 1) |
port1.3 (Group 1) |
Enabled |
Associated with multiple VLAN group #1 |
port1.2 (Group 2) |
port1.4 (Group 2) |
Enabled |
Associated with multiple VLAN group #2 |
port1.5 (Group 3) |
port1.7 (Group 3,4) |
Enabled |
Associated with multiple VLAN group #3 |
port1.6 (no group) |
port1.8 (Group 4) |
Disabled |
The multiple VLAN group is different |
port1.7 (Group 3,4) |
port1.8 (Group 4) |
Enabled |
Associated with multiple VLAN group #4 |
*In the above example, port1.6 cannot communicate with any port. However, if there are other ports that do not belong to any group, communication is possible between the ports that do not belong to any group.
4. Related Commands
4.1. List of related commands
Related commands are indicated below.
For details, refer to the Command Reference.
Operations | Operating commands |
---|---|
Multiple VLAN group settings |
switchport multiple-vlan group |
5. Examples of Command Execution
5.1. Multiple VLAN settings
Within VLAN #1, communication is allowed between PC1 and Server and between PC2 and Server, but communication is blocked between PC1 and PC2.
-
Example of multiple VLAN settings
The multiple VLAN group settings are as follows.
-
port1.1: Associated with multiple VLAN groups #1 and #2
-
port1.2: Associated with multiple VLAN group #1
-
port1.3: Associated with multiple VLAN group #2
-
Associate port1.1 with multiple VLAN groups #1 and #2.
Yamaha(config)# interface port1.1 (1) Yamaha(config-if)# switchport multiple-vlan group 1 (2) Yamaha(config-if)# switchport multiple-vlan group 2 (3) Yamaha(config-if)# exit
1 Switch to interface mode 2 Join in multiple VLAN group #1 3 Join in multiple VLAN group #2 -
Associate port1.2 with multiple VLAN group #1.
Yamaha(config)# interface port1.2 (1) Yamaha(config-if)# switchport multiple-vlan group 1 (2) Yamaha(config-if)# exit
1 Switch to interface mode 2 Join in multiple VLAN group #1 -
Associate port1.3 with multiple VLAN group #2.
Yamaha(config)# interface port1.3 (1) Yamaha(config-if)# switchport multiple-vlan group 2 (2) Yamaha(config-if)# exit
1 Switch to interface mode 2 Join in multiple VLAN group #2
6. Points of Caution
The points of caution regarding this function are as follows.
-
The multiple VLAN group to associate with a link aggregation logical interface must be the same.
-
A multiple VLAN group is only applicable to forwarding between ports. Voluntary packets will not be affected by the settings of a multiple VLAN group.
-
Even if a multiple VLAN is configured, communication may not work correctly due to the following influences.
-
Blocked status of loop detection
-