VLAN mapping is based on the destination and source MAC address in the packets. A VLAN is a set of MAC addresses. How this set is created is based on the configuration policies. The most direct approach to configure a VLAN is by directly specifying the MAC addresses which belong to a specific VLAN.
Auto-learning
The advantage of auto-learning is, that the network administrator does not have to directly specify MAC addresses. The disadvantage is that control over the VLAN, from a security point of view, is reduced - mainly seen from a security point of view.
VLANs can be configured based on the:
- MAC address
- IP-net
- IP-address
- Switch port.
New policy Type
Valid input: Switch port, MAC address, IP net, IP address.
Default value: Switch port.
Function: Specifies type of policy.
Comment: Depending on which type you select, the various options in the dialog become
available.
Switch port
Valid input: Any suitable local port for the switch (not global).
Default value: None.
MAC address
Valid input: Any suitable MAC address.
Default value: None.
IP Net
Valid input: 4-byte IP address in dotted decimal notation.
Default value: None.
Comment: Known networks are selected from the list, and the net mask is displayed
automatically.
Net Mask
Valid input: A valid IP network mask.
Default value: A default network mask for the defined class of IP address is suggested.
Function: Defines the network part of the IP address.
Comment: Make sure the suggested network mask is correct for use on your network.
IP address
Valid input: 4-byte IP address in dotted decimal notation.
Default value: None.
More info about
*Legal Information © 2000 Intel Corporation