Alcatel 9000 Betriebsanweisung PDF herunterladen (Seite 111)

100

101

Configuring VLANs Enabling/Disabling VLAN Authentication

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page 5-11

Enabling/Disabling VLAN Authentication

Layer 2 authentication uses VLAN membership to grant access to network resources. Authenticated

VLANs control membership through a log-in process; this is sometimes called user authentication. A

VLAN must have authentication enabled before it can participate in the Layer 2 authentication process.

To enable/disable authentication on an existing VLAN, use the vlan authentication command. For exam-

ple, the following commands enable authentication on VLAN 955 and disable it on VLAN 455:

-> vlan 955 authentication enable

-> vlan 455 authentication disable

Once authentication is enabled on a VLAN, then only authenticated mobile port devices can join the

VLAN after completing the appropriate log-in process. To enable authentication on a mobile port, use the

vlan port authenticate command. For more information about mobile port commands and Layer 2

authentication for Alcatel switches, see Chapter 7, “Assigning Ports to VLANs,” and Chapter 22, “Config-

uring Authenticated VLANs.”

Configuring VLAN Router Interfaces

Network device traffic is bridged (switched) at the Layer 2 level between ports that are assigned to the

same VLAN. However, if a device needs to communicate with another device that belongs to a different

VLAN, then Layer 3 routing is necessary to transmit traffic between the VLANs. Bridging makes the

decision on where to forward packets based on the packet’s destination MAC address; routing makes the

decision on where to forward packets based on the packet’s IP or IPX network address (e.g., IP -

21.0.0.10, IPX - 210A).

Alcatel switches support routing of IP and IPX traffic. A VLAN is available for routing when at least one

router interface is defined for that VLAN and at least one active port is associated with the VLAN. Up to

eight IP interfaces and one IPX interface can be configured for each VLAN. The maximum number of IP

interfaces allowed for the entire switch is 4094.

If a VLAN does not have a router interface, the ports associated with that VLAN are in essence firewalled

from other VLANs. For information about how to configure router interfaces, see Chapter 12, “Configur-

ing IP,” and “Configuring an IPX Router Interface” on page 5-12.

1 2 ... 106 107 108 109 110 111 112 113 114 115 116 ... 701 702

Kommentare zu diesen Handbüchern

Keine Kommentare

Alcatel 9000 Betriebsanweisung Seite 111

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Software Alcatel 9000