vlan
TRANSCRIPT
VIRTUALVIRTUAL LAN LAN_mynk
What is LAN ?A LAN is a local area network and is defined as all devices in the same broadcast domain.
It works within campus or building of up to 5 km. Its speed is 10mbps to 100mbps.
What is VLAN?What is VLAN?
• A VLAN is a grouping of computers that is logically segmented by functions, project teams, or applications without regard to the physical location of users.
As I said, a VLAN is a virtual LAN.
In technical terms, a VLAN is a broadcast domain
created by switches.
Normally, it is a router creating that broadcast domain.
With VLAN’s, a switch can create the broadcast domain
Broadcast Domain?
A broadcast domain is a network segment in which any network device can transmit data directly to another device without going through a router
A layer 3 device breaks up a broadcast domain
6
Traditional LAN
A traditional LAN would require all users of the same requirements and same IP subnet (broadcast domain) be connected to the same equipment.
7
How can devices on different VLAN’s communicate ? Devices on different VLAN’s can
communicate with a router or a Layer 3 switch.
As each VLAN is its own subnet, a router or Layer 3 switch must be used to route between the subnets.
How VLANs Work?
VLANs are identified by a number Valid ranges 1-4094
On a VLAN-capable switch, you assign ports with the appropriate VLAN number
The switch then only allows data to be sent between ports with the same VLAN
11
How VLANs Work?
Since almost every network is larger than a single switch, there needs to be a way to have traffic sent between two different switches
One way to do it is to assign a port on each switch with a VLAN and run a cable between the switches
12
How VLANs work?
For example, if there were 6 hosts on each switch on 6 different vlans, you would need 6 ports on each switch to connect the switches together. This would mean that if you had 24 different vlans you could only have 24 hosts on a 48 port switch
13
How VLANs work?
There was a standard develop to make it so that a single connection between two switches could be used to send traffic for all vlans
802.1q – Provides a VLAN tag in front of the Layer 2 frame
14
Benefits of VLANs
15
Benefits of VLANs Geographically separated users on the same IP
subnet (broadcast domain)
Limit the size of broadcast domains and limit broadcast activity
Security benefits by keep hosts separated by VLAN and limiting what devices can talk to those hosts
16
Benefits of VLANs Cost savings as you don’t need additional
hardware and cabling
Operational benefits because changing a user’s IP subnet (Broadcast Domain) is in software
17
Need for VLAN
By the 1980's, most networks consisted of a simple, hierarchical arrangement in which multiple, shared-media networks were connected by a router.
Unfortunately, traditional routers were slow, complicated and expensive.
You need to consider using VLAN’s in any of the following situations:
You have more than 200 devices on your LAN
Groups of users need to be on the same broadcast domain because they are running the same applications.
Or, just to make a single switch into multiple virtual switches.
As the need for faster networks emerged, a new solution was Needed
VLANs: Different Models
Port-based VLANs
In this implementation the administrator assigns each port of a switch to a vLAN .
The switch determines the VLAN membership of each packet by noting the port on which it arrives
When a user is moved to a different port of the switch, the administrator can simply reassign the new port to the user's old
VLAN.
The network change is then completely transparent to the user, and the administrator saves a trip to the wiring closet.
However, this method has one significant drawback.
If a repeater is attached to a port on the switch, all of the users connected to that repeater must be members of the same VLAN.
MAC address-based VLANs-
The VLAN membership of a packet in this caseIs determined by its source or destination MAC
address. Each switch maintains a table of MAC addresses and
their corresponding VLAN memberships. A key advantage of this method is that the switch
doesn't need to be reconfigured when a user moves to a different port
Layer 3 (or protocol)-based Layer 3 (or protocol)-based VLANsVLANsWith this method, the VLAN membership of a
packet is based on protocols (IP, IPX, NetBIOS, etc.) and Layer 3 addresses.
This is the most flexible method and provides the most logical grouping of users.
Additionally, protocol-based membership allows the
administrator to assign non-routable protocols, such as
NetBIOS or DECnet, to larger VLANs than routable
protocols like IPX or IP.
What do VLAN’s offer?What do VLAN’s offer?
VLAN’s offer higher performance for medium and large LAN’s because they limit broadcasts.
As the amount of traffic and the number of devices grow, so does the number of broadcast packets.
By using VLAN’s you are containing broadcasts
Advantages of VLANs
Number of devices for a specific network topology reduced.
Managing of physical devices becomes less complex.
Increased security options by separation and specific frame delivery
Disadvantages / Security Issues VLANs rely on switches to do the right thing. Packet leaks from one VLAN to the next. Injected packet meant for an attack. Solved by IPsec