Install guide
Software Version 2.9.1 27
Software Version 2.9.1
C613-10486-00 REV C
Switch ports within each VLAN connect to the switch module, to obtain layer
two connectivity (local or remote) for their attached devices. An internal data
path, shown by the horizontal grey arrow, provides connectivity between the
two modules.
The VLAN-to-WAN Bridging Process
The switch module provides layer two connectivity for locally attached ports
within the same VLAN. An internal data connection, shown by the horizontal
grey arrow in Figure 3, provides connectivity between the two modules. The
switch forwarding database, and the bridge station map both employ their own
respective processes to learn the addresses of their attached devices.
Local devices within the same VLAN, utilise the forwarding database and their
traffic is switched by hardware at layer two. Remote devices within the same
VLAN, utilise both the forwarding database and the station map, hence their
traffic is remote bridged across the wide area link.
The switch module examines the MAC addresses of frames received on its
switch ports. If it recognises an address as belonging to a locally attached
device, it forwards the frame to the appropriate port. If it recognises a frame’s
MAC address as belonging to a device residing over the wide area link, it
forwards the frame to the bridge module via the internal connection shown.
The bridge module then forwards the frame across the wide area link.
VLAN-to-WAN data always crosses the wide area link as tagged frames. At the
link’s remote end, the bridge may either retain the VID tags for forwarding the
frames to a tagged port, or remove the VID tags for forwarding the frames to
an untagged port within the VLAN. For this reason, you must set the set
bridge stripvlantag command to off.
VLAN-to-WAN Bridge Configuration
Figure 4 shows a simple remote VLAN connection. A company has its head
office at location A and its training centre at location B. In location B, a training
server provides computer based training programs that are accessible from
selected user PCs located at both sites. Unfortunately, the training application
operates over an unroutable protocol.
To solve this problem, a single VLAN is created for the training PCs and a
remote VLAN connection lets them access the wide area link.