User`s manual

73
DWS-1008 User’s Manual
D-Link Systems, Inc.
Conguring and Managing Ports and VLANs
Interoperating with Cisco Systems EtherChannel
Load-sharing port groups are interoperable with Cisco Systems EtherChannel capabilities.
To congure a Cisco Catalyst switch to interoperate with a D-Link DWS-1008 switch, use the
following command on the Catalyst switch:
set port channel port-list mode on
Conguring and Managing VLANs
Understanding VLANs
A virtual LAN (VLAN) is a Layer 2 broadcast domain that can span multiple wired or wireless
LAN segments. Each VLAN is a separate logical network and, if you congure IP interfaces
on the VLANs, MSS treats each VLAN as a separate IP subnet.
Note: The CLI commands in this chapter congure VLANs on network ports. The commands
do not congure VLAN membership for wireless or wired authentication users. To assign
a user to a VLAN, congure the RADIUS Tunnel-Private-Group-ID attribute or the VLAN-
Name vendor specic attribute (VSA) for that user.
Only network ports can be precongured to be members of one or more VLAN(s). You
congure VLANs on a switch’s network ports by conguring them on the switch itself. You
congure a VLAN by assigning a name and network ports to the VLAN. Optionally, you can
assign VLAN tag values on individual network ports. You can congure multiple VLANs on a
switch’s network ports. Optionally, each VLAN can have an IP address.
VLANs are not congured on AP access ports or wired authentication ports, because the VLAN
membership of these types of ports is determined dynamically through the authentication
and authorization process. Users who require authentication connect through switch ports
that are congured for access points or wired authentication access. Users are assigned
to VLANs automatically through authentication and authorization mechanisms such as
802.1X.
By default, none of a switch’s ports are in VLANs. A switch cannot forward trafc on the
network until you congure VLANs and add network ports to those VLANs.
VLANs, IP Subnets, and IP Addressing
Generally, VLANs are equivalent to IP subnets. If a switch is connected to the network by
only one IP subnet, the switch must have at least one VLAN congured. Optionally, each
VLAN can have its own IP address. However, no two IP addresses on the switch can belong
to the same IP subnet.
You must assign the system IP address to one of the VLANs, for communications between
switches and for unsolicited communications such as SNMP traps and RADIUS accounting
messages. Any IP address congured on a switch can be used for management access
unless explicitly restricted.