Multiple VLAN
Multiple VLAN
1. Function Overview
On a multiple VLAN, by associating a port with a multiple VLAN group, you can block traffic from ports that do not belong to the same multiple VLAN group.
You can also join a single port to multiple VLAN groups.
By using this function, it is easy to handle requests to block only traffic between terminals, such as the example below.
-
Example of using multiple VLANs
3. Function Details
3.1. Operating specifications
Use the switchport multiple-vlan group command to configure a multiple VLAN group.
Multiple VLANs can be configured as LAN/SFP ports and link aggregation logical interfaces.
If you wish to configure a multiple VLAN group for a trunk port, this will be applied to all relevant VLANs that belong to the port in question.
The multiple VLAN group settings will also be applied to a multicast frame.
This can be used together with the following functions. Control of traffic enable/disable for these functions is set according to the multiple VLAN group settings.
-
Port-based VLAN/tagged VLAN/voice VLAN
-
Port authentication
A multiple VLAN can contain up to 256 groups.
Use the show vlan multiple-vlan group command to confirm the setting status for the interface of each multiple VLAN group.
3.2. Examples of traffic between multiple VLAN groups
-
Example of traffic for a multiple VLAN group
When using multiple VLAN group settings (Group #1 through #4) as shown in the diagram above, enabling/disabling traffic between specific ports A/B and the reasons for such as shown in the table below.
Port number A (group) | Port number B (group) | Traffic enable/disable | Reason |
---|---|---|---|
port1.1 (Group 1) |
port1.2 (Group 2) |
Disabled |
The multiple VLAN group is different |
port1.1 (Group 1) |
port1.3 (Group 1) |
Enabled |
Associated with multiple VLAN group #1 |
port1.2 (Group 2) |
port1.4 (Group 2) |
Enabled |
Associated with multiple VLAN group #2 |
port1.5 (Group 3) |
port1.7 (Group 3,4) |
Enabled |
Associated with multiple VLAN group #3 |
port1.6 (no group) |
port1.8 (Group 4) |
Disabled |
The multiple VLAN group is different |
port1.7 (Group 3,4) |
port1.8 (Group 4) |
Enabled |
Associated with multiple VLAN group #4 |
Also, traffic can be established between ports that are not associated with a multiple VLAN group, so long as it is within the same VLAN.
3.3. Communication example when inter-VLAN routing is possible
-
Example of inter-VLAN routing communication
Inter-VLAN routing is possible with L3 switches with routing enabled. In inter-VLAN routing, packets that are routed by hardware can be controlled by multiple VLAN groups.
When using multiple VLAN group settings (Group #1 through #2) as shown in the diagram above, enabling/disabling traffic between specific ports A/B and the reasons for such as shown in the table below.
Port number A (group) | Port number B (group) | Traffic enable/disable | Reason |
---|---|---|---|
port1.3 (Group 1) |
port1.5 (Group 1) |
Enabled |
Associated with multiple VLAN group #1 |
port1.4 (Group 1) |
port1.8 (Group 2) |
Disabled |
The multiple VLAN group is different |
4. Related Commands
Related commands are indicated below.
For details on the commands, refer to the Command Reference.
Operations | Operating commands |
---|---|
Multiple VLAN group settings |
switchport multiple-vlan group |
Settings for the name of multiple VLAN group |
multiple-vlan group name |
Set YMPI frame transmission function when multiple VLANs are specified |
multiple-vlan transfer ympi |
Show multiple VLANs |
show vlan multiple-vlan |
5. Examples of Command Execution
5.1. Multiple VLAN settings example 1
This configures multiple VLAN settings to achieve the following.
Hosts connected to ports 1–7 will connect to the Internet and other external lines, through the line to which port 8 is connected
Communications between hosts connected to ports 1–4 are blocked
Communications between hosts connected to ports 5–7 are permitted
Communications between hosts connected to ports 1–4 and ports 5–7 are blocked
The multiple VLAN group settings are as follows.
-
port1.1: Associated with multiple VLAN group #1
-
port1.2: Associated with multiple VLAN group #2
-
port1.3: Associated with multiple VLAN group #3
-
port1.4: Associated with multiple VLAN group #4
-
port1.5: Associated with multiple VLAN group #5
-
port1.6: Associated with multiple VLAN group #5
-
port1.7: Associated with multiple VLAN group #5
-
port1.8: Associated with multiple VLAN groups #1, #2, #3, #4, and #5
-
This sets the name of multiple VLAN group #1 to “Network1”.
Yamaha(config)# multiple-vlan group 1 name Network1 (1)
1 Settings for the name of multiple VLAN group #1 -
This sets the name of multiple VLAN group #5 to “Network5”.
Yamaha(config)# multiple-vlan group 5 name Network5 (1)
1 Settings for the name of multiple VLAN group #5 -
Associates port1.1 through port1.4 with multiple VLAN groups #1 through #4 respectively.
Yamaha(config)# interface port1.1 (1) Yamaha(config-if)# switchport multiple-vlan group 1 (2) Yamaha(config-if)# exit Yamaha(config)# interface port1.2 (3) Yamaha(config-if)# switchport multiple-vlan group 2 (4) Yamaha(config-if)# exit Yamaha(config)# interface port1.3 (5) Yamaha(config-if)# switchport multiple-vlan group 3 (6) Yamaha(config-if)# exit Yamaha(config)# interface port1.4 (7) Yamaha(config-if)# switchport multiple-vlan group 4 (8) Yamaha(config-if)# exit
1 Switch to interface mode 2 Configure multiple VLAN group 3 Switch to interface mode 4 Configure multiple VLAN group 5 Switch to interface mode 6 Configure multiple VLAN group 7 Switch to interface mode 8 Configure multiple VLAN group -
This associates port1.5 through port1.7 with multiple VLAN group #5.
Yamaha(config)# interface port1.5-7 (1) Yamaha(config-if)# switchport multiple-vlan group 5 (2) Yamaha(config-if)# exit
1 Switch to interface mode 2 Specify multiple VLAN group -
This associates port1.8 with multiple VLAN groups #1, #2, #3, #4, #5.
Yamaha(config)# interface port1.8 (1) Yamaha(config-if)# switchport multiple-vlan group 1-5 (2) Yamaha(config-if)# exit
1 Switch to interface mode 2 Specify multiple VLAN group -
This checks the multiple VLAN group settings.
Yamaha>show vlan multiple-vlan GROUP ID Name Member ports ======== ================================ ====================== 1 Network1 port1.1 port1.8 2 GROUP0002 port1.2 port1.8 3 GROUP0003 port1.3 port1.8 4 GROUP0004 port1.4 port1.8 5 Network5 port1.5 port1.6 port1.7 port1.8
-
5.2. Multiple VLAN settings example 2
This configures multiple VLAN settings to achieve the following.
Hosts connected to ports 1 to 7 will connect to the Internet and other external lines, through the line to which port 8 is connected
Hosts connected to ports 1 to 7 are associated with VLAN #2 and assigned an IP address using the DHCP server functions
The IP address for VLAN #2 is 192.168.110.240/24 and the range of assigned addresses is from 192.168.110.2 to 192.168.110.191/24
Communication is blocked between hosts connected to ports 1 to 7
The multiple VLAN group settings are as follows.
-
port1.1: Associated with multiple VLAN group #1
-
port1.2: Associated with multiple VLAN group #2
-
port1.3: Associated with multiple VLAN group #3
-
port1.4: Associated with multiple VLAN group #4
-
port1.5: Associated with multiple VLAN group #5
-
port1.6: Associated with multiple VLAN group #6
-
port1.7: Associated with multiple VLAN group #7
-
port1.8: Associated with multiple VLAN groups #1, #2, #3, #4, #5, #6, and #7
-
Assign ports port1.1 to port1.7 to VLAN #2.
Yamaha(config)# interface port1.1-7 Yamaha(config-if)# switchport access vlan 2 Yamaha(config-if)#
Yamaha(config)# interface vlan2 Yamaha(config-if)# ip address 192.168.110.240/24
-
Create the DHCP pool “pool_vlan2”.
Yamaha(config)# dhcp pool pool_vlan2 Yamaha(config-dhcp)(1)
1 Switch to the DHCP mode -
Specify the VLAN #2 network portion 192.168.110.0/24 in the DHCP pool.
Yamaha(config-dhcp)# network 192.168.110.0/24
-
Specify the address assignment range from 192.168.110.2 to 192.168.110.191 in the DHCP pool.
Yamaha(config-dhcp)# range 192.168.110.2 192.168.110.191
-
Specify the default gateway to be notified in DHCP option settings and specify the DNS server in the DHCP pool.
Yamaha(config-dhcp)# default-router 192.168.110.240 (1) Yamaha(config-dhcp)# dns-server 192.168.110.1 (2) Yamaha(config-dhcp)# exit (3)
1 The default gateway address is 192.168.110.240 (its own address) 2 The DNS server address is 192.168.110.1 3 Exit the DHCP mode -
Activate the DHCP server functions for vlan2.
Yamaha(config)# interface vlan2 (1) Yamaha(config-if)# dhcp-server enable (2) Yamaha(config-if)# exit (3)
1 Switch to interface mode 2 Enable the DHCP server functions for the interface 3 Exit the interface mode -
Activate the DHCP server functions for the entire system.
Yamaha(config)# dhcp-server enable (1)
1 Enable the DHCP server functions for the entire system -
Associate port1.1 through port1.7 with multiple VLAN groups #1 through #7 respectively.
Yamaha(config)# interface port1.1 (1) Yamaha(config-if)# switchport multiple-vlan group 1 (2) Yamaha(config-if)# exit Yamaha(config)# interface port1.2 (3) Yamaha(config-if)# switchport multiple-vlan group 2 (4) Yamaha(config-if)# exit Yamaha(config)# interface port1.3 (5) Yamaha(config-if)# switchport multiple-vlan group 3 (6) Yamaha(config-if)# exit Yamaha(config)# interface port1.4 (7) Yamaha(config-if)# switchport multiple-vlan group 4 (8) Yamaha(config-if)# exit Yamaha(config)# interface port1.5 (9) Yamaha(config-if)# switchport multiple-vlan group 5 (10) Yamaha(config-if)# exit Yamaha(config)# interface port1.6 (11) Yamaha(config-if)# switchport multiple-vlan group 6 (12) Yamaha(config-if)# exit Yamaha(config)# interface port1.7 (13) Yamaha(config-if)# switchport multiple-vlan group 7 (14) Yamaha(config-if)# exit
1 Switch to interface mode 2 Configure multiple VLAN group 3 Switch to interface mode 4 Configure multiple VLAN group 5 Switch to interface mode 6 Configure multiple VLAN group 7 Switch to interface mode 8 Configure multiple VLAN group 9 Switch to interface mode 10 Configure multiple VLAN group 11 Switch to interface mode 12 Configure multiple VLAN group 13 Switch to interface mode 14 Configure multiple VLAN group -
Associate port1.8 with multiple VLAN groups #1 to #7.
Yamaha(config)# interface port1.8 (1) Yamaha(config-if)# switchport multiple-vlan group 1-7 (2) Yamaha(config-if)# exit
1 Switch to interface mode 2 Specify multiple VLAN group -
This checks the multiple VLAN group settings.
Yamaha>show vlan multiple-vlan GROUP ID Name Member ports ======== ================================ ====================== 1 GROUP0001 port1.1 port1.8 2 GROUP0002 port1.2 port1.8 3 GROUP0003 port1.3 port1.8 4 GROUP0004 port1.4 port1.8 5 GROUP0005 port1.5 port1.8 6 GROUP0006 port1.6 port1.8 7 GROUP0007 port1.7 port1.8
6. Points of Caution
The points of caution regarding this function are as follows.
-
The function cannot be used in conjunction with a private VLAN.
-
The multiple VLAN group to associate with a link aggregation logical interface must be the same.
-
A multiple VLAN group is only applicable to forwarding between ports. Voluntary packets will not be affected by the settings of a multiple VLAN group.
-
Even if a multiple VLAN is configured, communication may not work correctly due to the following influences.
-
Block status of spanning tree
-
IGMP snooping/MLD snooping status
-
Blocked status of loop detection
-
-
In inter-VLAN routing, multiple VLAN communication restrictions are applied only to packets routed by hardware processing.
Restrictions do not apply to inter-VLAN routing through the CPU. -
YMPI frames are transmitted for managing Yamaha wireless access points if multiple VLANs are specified.
Therefore, even if there are multiple Yamaha wireless access points associated with different multiple VLAN groups, the cluster management function or the wireless LAN controller function can be used.