background image
328
Chapter 6
Virtual LANs (VLANs)
Remember that each host must also have the correct IP address information.
For example, each host in VLAN 2 must be configured into the 172.16.20.0/24
network. It is also important to remember that, if you plug a host into a
switch, you must verify the VLAN membership of that port. If the member-
ship is different than what is needed for that host, the host will not be able
to reach the needed network services, such as a workgroup server.
Dynamic VLANs
A
dynamic VLAN
determines a node's VLAN assignment automatically.
Using intelligent management software, you can enable hardware (MAC)
addresses, protocols, or even applications to create dynamic VLANs. It's up
to you! For example, suppose MAC addresses have been entered into a cen-
tralized VLAN management application. If a node is then attached to an
unassigned switch port, the VLAN management database can look up the
hardware address and assign and configure the switch port to the correct
VLAN. This is very cool--it makes management and configuration easier
because if a user moves, the switch will assign them to the correct VLAN
automatically. But you have to do a lot more work initially setting up the
database.
Cisco administrators can use the VLAN Management Policy Server (VMPS)
service to set up a database of MAC addresses that can be used for dynamic
addressing of VLANs. A VMPS database maps MAC addresses to VLANs.
Identifying VLANs
A
s frames are switched throughout the internetwork, switches must
be able to keep track of all the different types, plus understand what to do
with them depending on the hardware address. And remember, frames are
handled differently according to the type of link they are traversing.
There are two different types of links in a switched environment:
Access links
This type of link is only part of one VLAN, and it's referred
to as the
native VLAN
of the port. Any device attached to an
access link
is unaware of a VLAN membership--the device just assumes it's part of
a broadcast domain, but it has no understanding of the physical network.
Switches remove any VLAN information from the frame before it's sent
to an access-link device. Access-link devices cannot communicate with
devices outside their VLAN unless the packet is routed through a router.
Copyright ©2002 SYBEX, Inc., Alameda, CA
www.sybex.com