Layer 3 switches

Layer 3 switches - Routing VLANs with shared access to the Internet using a Prosafe Router/VPN Firewall How to configure Routing VLANs with shared access to the Internet VLAN-Definition VLANs are logical subgroups within a Local Area Network (LAN), which combine user stations, and network devices into a single unit, regardless of the physical LAN segment to which they are attached. VLANs allow network traffic to flow more efficiently within subgroups. VLANs use software to reduce the amount of time it takes for network changes, additions, and moves to be implemented. Notes when setting-up VLANs • A VLAN does not have a minimum number of port • VLANs work at the OSI Layer 2 • A VLAN can be created per unit, device or via logical connection/combination • Broadcast and Multicast traffic is transmitted only in the VLAN in which traffic is generated. • To allow traffic between VLAN a device working at protocol level (Layer 3) is required Creating a routing VLAN To create routing VLANs access the VLAN Routing Wizard via Routing VLAN. 1) Type the VLAN ID (in the example the VLAN ID is 2) 2) Specify the IP address (192.168.2.1) and the subnet mask (255.255.255.0) 3) Expand the Port list by clicking on Unit 1 4) Select the correct option for each port that will be member of the VLAN Three options are available: - No membership (no symbol appearing in the gray box underneath the port number) - Untagged membership (U) - Tagged membership (T) In order to browse through the options just continuously click on the gray box until the correct one is set. For this scenario we will be using the U (Untagged) option on all the ports