The 802.1Q standard (VLAN tagging) is supported as a secure means of segmenting a network. The traffic between VLAN's is restricted, thereby providing secure boundaries and limiting the propagation of broadcast and multicast traffic. This means that any equipment supporting VLAN tagging will be able to connect to the ST, and present each VLAN id on a separate Ethernet segment for connection into the appropriate network.
IEEE 802.1Q VLAN support provides security isolation between corporate customers by creating corporate virtual private networking and allows independent LAN traffic to be carried over a single physical interface. 802.1Q VLAN adds an identifier to each Ethernet packet to identify which VLAN it belongs to.
VLAN security is used together to provide total security isolation of grouped Ethernets.
Note: Only one untagged VLAN is allowed
(which uses a special VLAN id of 4096).
|
|
Name: User Defined
VLAN ID: Note: A VLAN ID of 4096 = untagged VLAN ID
Tagged Traffic: Checked if true.
Description: User Defined
Add This VLAN to all existing BS TRx: Check if required.
DHCP Relay Agent Information (Opt 82): The DHCP relay agent information option (option 82) enables a BS TRx to include information about itself when forwarding SS originated DHCP packets to a DHCP server. The DHCP server can use this information to implement IP address or other parameter-assignment policies and improve security. Select Active if the DHCP server supports that feature and it is required to be implemented.
Broadcast Service Class: Select from List. see Service Classes
Single User: Check box for single user
MAC Forced Forwarding: MAC forced forwarding sends a MAC address, received as response from an ARP request, through the BS TRx to the router. This allows the router to ensure layer 2 separation and control traffic to and from individual SSs. Used if for example the operator implements billing for traffic between SSs. Check to enable. Refer to RFC 4562.
MAC Forced Forwarding IP Address: This is the IP address of the router connected to the BS TRx , only required if MAC force forwarding is checked
See also VLAN Scenarios
See Action Buttons