Seminar on

VLAN TECHNOLOGY
Presented by: Manish Jain

DEFINING VLANs
Virtual Local Area Network VLAN can be roughly equated to a broadcast domain More specifically, VLANs can be seen as analogous to a group of end-stations, perhaps on multiple physical LAN segments, that are not constrained by their physical location and can communicate as if they were on a common LAN.

There are several ways in which VLAN membership can be defined

This paper divides VLAN solutions into four general types:
Port grouping MAC-layer grouping, Network-layer grouping and IP multicast grouping.

Later we will discuss the issue of manual vs. automatic VLAN configuration

Membership by Port Group

Initial VLAN implementations defined VLAN membership by groups of switch ports

Later implementations support VLANs that span multiple switches. This scenario is depicted in Figure 1.

Membership by MAC Address

MAC-layer addresses are hard-wired into the workstations network interface card (NIC).
A VLAN defined by MAC address can be thought of as a userbased VLAN.

VLANs based on MAC addresses enable network managers to move a workstation to a different physical location on the network and have that workstation automatically retain its VLAN membership.

Layer 3Based VLANs

VLANs based on layer 3 information take into account network-layer address (for example, subnet address for TCP/IP networks) in determining VLAN membership. Adv : Users can physically move their workstations without having to reconfigure each workstations network addressa benefit primarily for TCP/IP users. Disadv : Inspecting layer 3 addresses in packets is more time consuming than looking at MAC addresses in frames.

IP Multicast Groups as VLANs

When an IP packet is sent via multicast, it is sent to an address that is a proxy for an explicitly defined group of IP addresses that is established dynamically. All workstations that join an IP multicast group can be seen as members of the same virtual LAN. They are only members of a particular multicast group for a certain period of time. Therefore, it results in the dynamic nature of VLANs.

Automation of VLAN Configuration

There are three primary levels of automation in VLAN configuration: Manual. With purely manual VLAN configuration, both the initial setup and all subsequent moves and changes are controlled by the network administrator. Semiautomated. Semiautomated configuration refers to the option to automate either initial configuration, subsequent reconfigurations (moves/changes), or both. Fully Automatic. A system that fully automates VLAN configuration implies that workstations automatically and dynamically join VLANs depending on some criterias or policies preset by the network administrator.

VLAN Implementation Benefits

Reducing the Cost of Moves and Changes : VLAN membership is not tied to a workstations location in the network, allowing moved workstations to retain their original IP addresses and subnet membership. Virtual Workgroups : One of the more ambitious VLAN objectives is the establishment of the virtual workgroup model. The concept can be understood by the example of full VLAN implementation across the campus network environment which has several departments.

CONTINUED

VLAN Implementation Benefits (contd.)

Reduction of Routing for Broadcast Containment : Broadcast traffic from servers and end-stations in a particular VLAN is replicated only on those switch ports connected to end-stations belonging to that VLAN. Security : Separating systems that have sensitive data from the rest of the network decreases the chances that people will gain access to information they are not authorised to see. Projects/Special applications : Managing a project or working with a specialised application can be simplified by the use of a VLAN.

CONTINUED...

VLAN Implementation Benefits (contd.)

Performance/Bandwidth : Careful monitoring of network use allows the network administrator to create VLANs that reduce the number of router hops and increase the apparent bandwidth for network users.

Departments/Specific job types : Companies may want to set up VLANs for departments that are heavy network users or a VLAN across departments that is dedicated to specific types of employees.

VLANs Over the WAN

VLANs can be extended across the WAN but after considering the following two facts : Since VLANs defined over the WAN will permit LAN broadcast traffic to consume expensive WAN bandwidth,this is generally not advised. However, if WAN bandwidth is free for a particular organization (for example, an electric utility with dark fiber installed in its right of way), then extending VLANs over a WAN can be considered.

VLAN Trunking Protocol

The VLAN trunking protocol (VTP) is the protocol that switches use to communicate among themselves about VLAN configuration. This trunking protocol provides an amazing technology that can really make a difference in the speed and quality of the network. The VLANs can communicate with each other via the the trunking connection between two switches using the router.

Diagram showing trunking in VLANs

Explaination of the figure behind

In the image above, each switch has two VLANs. On the first switch, VLAN A and VLAN B are sent through a single port (trunked) to the router and through another port to the second switch. VLAN C and VLAN D are trunked from the second switch to the first switch, and through the first switch to the router. This trunk can carry traffic from all four VLANs. The trunk link from the first switch to the router can also carry all four VLANs. In fact, this one connection to the router allows the router to appear on all four VLANs, as if it had four different physical ports connected to the switch.

The VLANs can communicate with each other via the trunking connection between the two switches using the router.

SUMMARY
Basically, A VLAN or Virtual Area Network is a collection of nodes that are grouped together in a single broadcast domain. And a broadcast domain is a network that will receive a broadcast packet from any node located within that network. The world has changed a lot in the last couple of decades. Instead of simply dealing with local or regional concerns, many businesses now have to think about global markets and logistics. Many companies have facilities spread out across the country or around the world, and there is one thing that all of them need: A way to maintain fast, secure and reliable communications wherever their offices are.

Thankyou All for Patient Hearing