User's Manual

114 Document Number: 0100SM1401 Issue: 06-16
Example 2: Trunk Port
The following example shows the configuration of VLAN required to allow pre-tagged VLAN packets, to be sent over the radio network.
Part G – Quick Start Guide
[VLAN 1] Network Management
[VLAN 2] SCADA Control
Un-Tagged packets
ETH1
Network
Management
SCADA
Control
ETH2
ETH2
Ethernet
Switch
WAN
Ethernet
Switch
Entry Point VLAN configuration
VLAN:
Management VLAN ID: 1
ETH1 Mode: Trunk
ETH1 Ingress Filtering: Disabled
ETH1
Optional connection for
radio system diagnostics
Pre-tagged VLAN packets are sent into each port of the entry point radio. This example shows managed Ethernet switches
performing the VLAN tagging.
The entry point radio is configured to trunk VLAN 1 & VLAN 2 on the ETH1 interface.
As packets from the Network Management Host are being tagged on VLAN 1 (by the managed switch) and the Management
VLAN ID of each radio is a member of VLAN 1, the Network Management Host will have access to radio services including:
HTTP/S, Telnet, SSH, SNMP & eDiags.
As packets from the SCADA Control Host are being tagged on VLAN 2 (by the managed switch) and the remote radio’s ETH2
interface is a member of VLAN 2, the SCADA Control Host will have access to the SCADA devices connected to the ETH2
interface of the remote radios.
In this example, the Network Management Host does not have access to the SCADA devices (as they are connected to the
ETH2 interface of the remote radios, which is a member of VLAN 2), while the SCADA Control Host does not have access to
radio services, as the managed switch has tagged them on VLAN 1.
Example 3: Trunk Port & Access Port
A mixture of the preceding examples can be implemented on the radio network. In this circumstance, the trunk port will not
allow the VLAN which the Access port is a member of, unless specified in the membership table.
Remote A configuration
VLAN:
Management VLAN ID: 1
ETH2 Mode: Access
ETH2 PVID: 2
Remote B configuration
VLAN:
Management VLAN ID: 1
ETH1 Mode: Access
ETH1 PVID: 1
ETH2 Mode: Access
ETH2 PVID: 2