Owner's Manual

268 | Chapter 9. VLANs
NETGEAR 8800 User Manual
• A VLAN called ClientConnections that contains client PC connections for the guest
rooms.
The goals for the motel network are as follows:
• Provide internet access for the ConfRoom and ClientConnections VLANs through the
web proxy server.
• Prevent communications between the ConfRoom and ClientConnections VLANs
• Enable communications between clients on the ClientConnections VLAN only within the
conference room.
• Enable communications between devices on the ConfRoom VLAN.
• Prevent communications between the PCs in the ClientConnections VLAN that are not in
the conference room.
Notice the following in Figure 17:
• The XCM8806 switches in the first floor closet and on the second floor contain the Main
VLAN with a tag of 100. This VLAN is connected via a tagged port between the first and
second floor switches.
• The XCM8806 in the conference room does not contain the Main VLAN and cannot be a
PVLAN member.
• All of the switches have the ClientConnections VLAN, and it uses VLAN tag 200.
• All of the switches have the ConfRoom VLAN, and it uses VLAN tag 300.
• The Conference Room XCM8806 connects to the rest of the network through a tagged
connection to the XCM8806 in the first floor closet.
• Because the XCM8806 in the first floor closet is a PVLAN member and uses the same
port to support two subscriber VLANs, a loopback port is required in all subscriber
VLANs, except the first configured subscriber VLAN.
Note: The following examples contain comments that follow the CLI
comment character (#). All text that follows this character is ignored
by the switch and can be omitted from the switch configuration.
The following commands configure the XCM8806 in the first floor closet:
# Create and configure the VLANs.
create vlan Main
configure vlan Main add port 1:1
configure vlan Main tag 100
configure vlan Main add port 1:2 tagged
create vlan ClientConnections
configure vlan ClientConnections tag 200
configure vlan ClientConnections add port 1:5-1:19
configure vlan ClientConnections add port 1:20 tagged