vlan_3_15_07

8/9/2019 VLAN_3_15_07

http://slidepdf.com/reader/full/vlan31507 1/26

VLANs

Virtual Local Area Networks

BA 479

8/9/2019 VLAN_3_15_07


Who are we?

Ryan Winklepleck Senior, Business, MIS, this µboy wonder¶ is 21-years-old and

still figuring out post-college life, possibly the circus is hiring? Kameel Husain

Senior, Business, MIS, would like to work with graphic designsand databases. Likes milk, bones are as strong asantimantium, cage fighter.

Rob Jerand Senior, Business, MIS, always up for kegstands and dollar

beers, enjoys running from the Cops, giving beer cans to thebums, and my future consists of either being a janitor atMicrosoft, or live in my parent¶s basement and do nothing.

Andrew Grill Jr. III Bats: R, Throws: R, Avg: .405, RBI: 132, HR: 59, Triple Crown

MVP, after a gamma blast accident, you don¶t want to see himwhen he¶s angry. Business, MIS, accounting intern atweyer haeuser and plans to work there in the future.

8/9/2019 VLAN_3_15_07


VLAN - Brief Introduction

Five W¶s and an H«

8/9/2019 VLAN_3_15_07


VLAN Introduction

What? ³Networks in which computers are assigned to LAN

segments by software rather than by hardware.´

Who? Us

Why? Often faster, while providing greater opportunities to

manage the flow of traffic on the LAN and Backbone

Network (BN) in comparison to traditional LAN androuted BN architectures.

8/9/2019 VLAN_3_15_07


VLAN Introduction

Where?

Hosting Centers and Ethernet Metropolitan Area Network (MAN)

When? Due to their complexity, usually only used for

large networks.

And t

heH

«

8/9/2019 VLAN_3_15_07


VLAN History

Thought it was going to be How?

8/9/2019 VLAN_3_15_07


VLAN History

First Products: Segmentable Switches

Allows creation of two or more virtualswitches from a single switch.

Assigning individual ports to a specific virtualswitch.

First products allowed switching of multiplesegments on a single switch, as well as

offering a monetary advantage over switchedEthernet ports which cost $700 or more atthe time.

8/9/2019 VLAN_3_15_07


VLAN Background

However, VLAN Backwards would be NALV«

8/9/2019 VLAN_3_15_07


VLAN Background

Local Area Networks (LAN)

Generally defined as a broadcast domain.

³Hubs, bridges, or switches on the same physicalsegment or segments connect end node devices´

A router is not needed for end nodes on the sameLAN segment to communicate with each other.

However a router is necessary for these devices tocommunicate with devices on other LAN segments.

8/9/2019 VLAN_3_15_07


VLAN Background

To the left, a LANenvironment connectedby routers

Drawback:

Routers add latencythat delays thetransmission of data

Solution? Switched Network

8/9/2019 VLAN_3_15_07


VLAN Background

To the right, a LANenvironment connected byswitches.

Speed and latency

advantages. Drawback:

All end nodes (or hosts)are in same broadcastdomain, which adds to thenetwork a significant

amount of traffic that isseen by all hosts.

Solution? Switched Network w/VLANs

8/9/2019 VLAN_3_15_07


Single-Switch VLAN

8/9/2019 VLAN_3_15_07


Single-Switch VLAN

The VLAN operates only inside oneswitch.

Computers, dozens or even hundreds, on

the VLAN are connected into this switch and assigned by software into differentVLAN segments.

VLAN segments act as though they areconnected to the same physical switch or hub.

8/9/2019 VLAN_3_15_07


Single-Switch VLAN cont.

It¶s possible to have one computer onlyin a VLAN. (Servers)

Four ways in which computers attached

to a VLAN can be assigned to specificVLANs inside them «:

1. Port-based VLANs (layer-1 VLANs)

2. MAC-based VLANs (layer-2 VLANs)3. IP-based VLANs (layer-3 VLANS )

4. Application-based VLANs (layer-4 or policy-

based VLANS )

8/9/2019 VLAN_3_15_07


Port-based VLANs(layer-1 VLANs)

Uses physical layer port number on thefront of the VLAN switch to assigncomputers to VLAN segments.

All computers are physically cabled into aspecific port on the VLAN switch.

A software is used to instruct the switch

as to which ports are assigned to which VLAN.

8/9/2019 VLAN_3_15_07


MAC-based VLANs(layer-2 VLANs)

Uses data link layer address or physicaladdress to form VLANs.

A software is used to instruct the switch

as to which incoming data link layer addresses are assigned to which VLANsegment.

Easier to manage than Port-based.

8/9/2019 VLAN_3_15_07


Multi-Switch VLAN

8/9/2019 VLAN_3_15_07


Multi Switch Approach

Layer 3

Layer 4

IEEE 802.1Q

8/9/2019 VLAN_3_15_07


Layer 3

Network layer

serves as the backbone for network trafficgoing across different VLANs.

provides logical routing interfaces to

VLANs on Layer 2 switches. A traditionalnetwork requires a physical interface froma router to a switch to perform inter VLAN

routing.

8/9/2019 VLAN_3_15_07


Layer 4

Transport Layer

Decides on where to send the packets.

sends incoming packets to one or moremachines which are hidden behind asingle IP address.

8/9/2019 VLAN_3_15_07


IEEE 802.1Q

allows multiple bridged networks totransparently share the same physicalnetwork link without leaking information

8/9/2019 VLAN_3_15_07


VLAN Benefits

What is Yreka Bakery spelled backwards?

8/9/2019 VLAN_3_15_07


Benefits

Performance VLANs can reduce sending traffic to unnecessary destinations

Formation of Virtual Workgroups

Segment sections of business (marketing, accounting, etc) byVLAN

Drawback ± distance in physical location, centralized server farms

Simplified Administration Adding, changing, moving user accounts no new

reconfiguration of hubs/routers necessary

8/9/2019 VLAN_3_15_07


Benefits

Reduce Costs VLANs can be used to create broadcast domains which can

eliminate cost of expensive routers

Security Keep information restricted to only users who need access

Can control boadcast domains, set up firewalls and more

8/9/2019 VLAN_3_15_07


VLAN Drawbacks

8/9/2019 VLAN_3_15_07


Drawbacks

Costs Purchasing additional hardware

May need to hire new employee to manage

Misc. New users may encounter new problems they are not familiar

with

If users are located on different floors of a building commonresources (such as a printer) could be in inconvenient locations

vlan_3_15_07

Documents