Enterasys SmartSwitch 2200 Owner's manual

802.1Q VLAN User’s Guide
Local Management Supplement
9033135-02

NOTICE
Enterasys Networks reserves the right to make changes in specifications and other information contained in this
document and its web site without prior notice. The reader should in all cases consult Enterasys Networks to determine
whether any such changes have been made.
The hardware, firmware, or software described in this document is subject to change without notice.
IN NO EVENT SHALL Enterasys Networks BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, OR
CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS)
ARISING OUT OF OR RELATED TO THIS DOCUMENT, WEB SITE, OR THE INFORMATION CONTAINED IN
THEM, EVEN IF Enterasys Networks HAS BEEN ADVISED OF, KNEW OF, OR SHOULD HAVE KNOWN OF,
THE POSSIBILITY OF SUCH DAMAGES.
Enterasys Networks, Inc.
35 Industrial Way
Rochester, NH 03867
© 2003 Enterasys Networks, Inc. All rights reserved.
Printed in the United States of America.
Order Number: 9033135-02 January 2003
LANVIEW is a registered trademark and Enterasys Networks, NETSIGHT, MATRIX, WEBVIEW, and any logos
associated therewith, are trademarks of Enterasys Networks, Inc. in the United States and other countries.
All other product names mentioned in this manual may be trademarks or registered trademarks of their respective
companies.
Version: Information in this guide refers to firmware version 3.x and 4.x only.
It does not refer to firmware version 5.x.
This guide applies to 2X2XX, 6X2XX, and 6X3XX Ethernet switch
devices only.

Contents iii
Contents
1INTRODUCTION
1.1 Using This Supplement ................................................................................... 1-2
1.2 Structure of This Document ............................................................................ 1-2
1.3 Overview of the Revision ................................................................................ 1-2
2LOCAL MANAGEMENT SCREENS
2.1 Revised Hierarchy........................................................................................... 2-1
2.2 Screen Format ................................................................................................ 2-1
2.3 VLAN Classification Configuration Screen...................................................... 2-2
2.3.1 Classification Precedence Rules .................................................... 2-8
2.3.2 Displaying the Current VID/Classification Assignments................ 2-11
2.3.3 Assigning a Classification to a VID ............................................... 2-11
2.3.4 Deleting Line Items ....................................................................... 2-12
2.4 Protocol Port Configuration Screen............................................................... 2-13
2.4.1 Assigning Ports to a Classification Rule ....................................... 2-15
3CONFIGURATION EXAMPLES
3.1 Example 4, Isolating Network Traffic According to Protocol ........................... 3-1
3.1.1 Solving the Problem........................................................................ 3-2
3.2 Example 5, Filtering Traffic According to a Layer 4 Classification Rule.......... 3-5
3.2.1 Solving the Problem........................................................................ 3-6
3.3 Example 6, Securing Sensitive Information According to Subnet ................... 3-6
3.3.1 Solving the Problem........................................................................ 3-7
INDEX

iv Figures
Figure Page
Figures
2-1 802.1Q VLAN Screen Hierarchy..................................................................................... 2-1
2-2 Example of a Local Management Screen ....................................................................... 2-2
2-3 VLAN Classification Configuration Screen...................................................................... 2-3
2-4 Protocol Port Configuration Screen .............................................................................. 2-13
3-1 Example 4, Isolating Traffic According to Protocol ......................................................... 3-2
3-2 Example 5, Filtering Traffic According to a Classification ............................................... 3-5
3-3 Example 6, Securing Traffic to One Subnet.................................................................... 3-7

Ta bl e s vTa bl e s v
Tabl e Page
Tables
2-1 Classification List..........................................................................................................2-4
2-2 Classification Precedence ............................................................................................2-9

Introduction 1-1
1
Introduction
The firmware in the SmartSwitch 2200 standalone devices and SmartSwitch 6000 modules has
been revised up to 3.10.xx and 3.11.xx. This document provides the following changes and
additions to the 802.1Q VLAN User’s Guide (9032599-03) as a result of both firmware revisions.
Changes Due to Revision 3.10.xx
•A replacement drawing for the 802.1Q VLAN Screen Hierarchy in the user’s guide that shows
the screens of the hierarchy that were affected.
•Descriptions of the new VLAN Classification Configuration screen and the Protocol Port
Configuration screen, which replace the current descriptions of the Protocol VLAN
Configuration screen and the Protocol Port Configuration screen, respectively. Also included is
information about protocol Classification Preference Rules.
•A revised Example 4 and two new examples (5 and 6), which show how the new screens can be
applied to configure a network.
Change Due to Revision 3.11.xx
The procedure was changed to mark and delete one or more line items in the VLAN Classification
Configuration screen.
IMPORTANT NOTICE
Information in this guide refers to firmware version 3.x and 4.x only. It does not refer to firmware
version 5.x.
This guide applies to 2X2XX, 6X2XX, and 6X3XX Ethernet switch devices only.

Using This Supplement
1-2 Introduction
1.1 USING THIS SUPPLEMENT
Read through this supplement completely to gain an understanding of the new capabilities
introduced by the new firmware and how to take full advantage of them when configuring your
SmartSwitch device.
1.2 STRUCTURE OF THIS DOCUMENT
This document is organized as follows:
Chapter 1, Introduction – Describes the scope of this supplement and identifies the user’s guides
that are affected. Provides an overview of the new functions introduced by the 03.10.xx and
03.11.xx firmware revisions and an overview of what an administrator should consider when
configuring SmartSwitch devices in the network.
Chapter 2, Local Management Screens – Describes the new VLAN Classification Configuration
screen, the replacement Protocol Port Configuration screen, and the Classification Preference
Rules, which must be considered before configuring the SmartSwitch device.
Chapter 3, Configuration Examples – Provides three examples of how to contain, filter, and
secure traffic in a network using the new screens.
1.3 OVERVIEW OF THE REVISION
Firmware revisions for the SmartSwitch 2200/6000 series devices allow network administrators to
classify frames received by the switch based on specific Layer 2, 3, and 4 information. The
classification is used for two independent functions:
•Create 802.1Q VLANs based on information contained in Layers 2 through 4 of the received
frames.
•Prioritize traffic throughout the network using the 802.1p frame tagging method.
These new functions translate into the following four key features:
Traffic Containment
Broadcast intensive protocols such as IPX and AppleTalk can be confined to the intended users,
servers, and segments by creating VLANs specifically for that purpose.
NOTE: Since this document applies to several SmartSwitch models, the term
SmartSwitch device is used in the following text instead of a particular model number.