Multiple VLAN

Multiple VLAN

1. Function Overview

On a multiple VLAN, by associating a port with a multiple VLAN group, you can block traffic from ports that do not belong to the same multiple VLAN group.
You can also join a single port to multiple VLAN groups.
By using this function, it is easy to handle requests to block only traffic between terminals, such as the example below.

  • Example of using multiple VLANs
    image

3. Function Details

3.1. Operating specifications

Use the switchport multiple-vlan group command to configure a multiple VLAN group.
Multiple VLANs can be configured as LAN/SFP ports and link aggregation logical interfaces.
If you wish to configure a multiple VLAN group for a trunk port, this will be applied to all relevant VLANs that belong to the port in question.
The multiple VLAN group settings will also be applied to a multicast frame.

This can be used together with the following functions. Control of traffic enable/disable for these functions is set according to the multiple VLAN group settings.

  • Port-based VLAN/tagged VLAN/voice VLAN

  • Port authentication

A multiple VLAN can contain up to 256 groups.

Use the show vlan multiple-vlan group command to confirm the setting status for the interface of each multiple VLAN group.

3.2. Examples of traffic between multiple VLAN groups

  • Example of traffic for a multiple VLAN group
    image

When using multiple VLAN group settings (Group #1 through #4) as shown in the diagram above, enabling/disabling traffic between specific ports A/B and the reasons for such as shown in the table below.

Port number A (group) Port number B (group) Traffic enable/disable Reason

port1.1 (Group 1)

port1.2 (Group 2)

Disabled

The multiple VLAN group is different

port1.1 (Group 1)

port1.3 (Group 1)

Enabled

Associated with multiple VLAN group #1

port1.2 (Group 2)

port1.4 (Group 2)

Enabled

Associated with multiple VLAN group #2

port1.5 (Group 3)

port1.7 (Group 3,4)

Enabled

Associated with multiple VLAN group #3

port1.6 (no group)

port1.8 (Group 4)

Disabled

The multiple VLAN group is different

port1.7 (Group 3,4)

port1.8 (Group 4)

Enabled

Associated with multiple VLAN group #4

Also, traffic can be established between ports that are not associated with a multiple VLAN group, so long as it is within the same VLAN.

3.3. Communication example when inter-VLAN routing is possible

  • Example of inter-VLAN routing communication
    image

Inter-VLAN routing is possible with L3 switches with routing enabled. In inter-VLAN routing, packets that are routed by hardware can be controlled by multiple VLAN groups.
When using multiple VLAN group settings (Group #1 through #2) as shown in the diagram above, enabling/disabling traffic between specific ports A/B and the reasons for such as shown in the table below.

Port number A (group) Port number B (group) Traffic enable/disable Reason

port1.3 (Group 1)

port1.5 (Group 1)

Enabled

Associated with multiple VLAN group #1

port1.4 (Group 1)

port1.8 (Group 2)

Disabled

The multiple VLAN group is different

4. Related Commands

Related commands are indicated below.
For details on the commands, refer to the Command Reference.

Operations Operating commands

Multiple VLAN group settings

switchport multiple-vlan group

Settings for the name of multiple VLAN group

multiple-vlan group name

Set YMPI frame transmission function when multiple VLANs are specified

multiple-vlan transfer ympi

Show multiple VLANs

show vlan multiple-vlan

5. Examples of Command Execution

5.1. Multiple VLAN settings example 1

This configures multiple VLAN settings to achieve the following.

Hosts connected to ports 1–7 will connect to the Internet and other external lines, through the line to which port 8 is connected
Communications between hosts connected to ports 1–4 are blocked
Communications between hosts connected to ports 5–7 are permitted
Communications between hosts connected to ports 1–4 and ports 5–7 are blocked

image

The multiple VLAN group settings are as follows.

  • port1.1: Associated with multiple VLAN group #1

  • port1.2: Associated with multiple VLAN group #2

  • port1.3: Associated with multiple VLAN group #3

  • port1.4: Associated with multiple VLAN group #4

  • port1.5: Associated with multiple VLAN group #5

  • port1.6: Associated with multiple VLAN group #5

  • port1.7: Associated with multiple VLAN group #5

  • port1.8: Associated with multiple VLAN groups #1, #2, #3, #4, and #5

    1. This sets the name of multiple VLAN group #1 to “Network1”.

      Yamaha(config)# multiple-vlan group 1 name Network1 (1)
      1 Settings for the name of multiple VLAN group #1
    2. This sets the name of multiple VLAN group #5 to “Network5”.

      Yamaha(config)# multiple-vlan group 5 name Network5 (1)
      1 Settings for the name of multiple VLAN group #5
    3. Associates port1.1 through port1.4 with multiple VLAN groups #1 through #4 respectively.

      Yamaha(config)# interface port1.1 (1)
      Yamaha(config-if)# switchport multiple-vlan group 1 (2)
      Yamaha(config-if)# exit
      Yamaha(config)# interface port1.2 (3)
      Yamaha(config-if)# switchport multiple-vlan group 2 (4)
      Yamaha(config-if)# exit
      Yamaha(config)# interface port1.3 (5)
      Yamaha(config-if)# switchport multiple-vlan group 3 (6)
      Yamaha(config-if)# exit
      Yamaha(config)# interface port1.4 (7)
      Yamaha(config-if)# switchport multiple-vlan group 4 (8)
      Yamaha(config-if)# exit
      1 Switch to interface mode
      2 Configure multiple VLAN group
      3 Switch to interface mode
      4 Configure multiple VLAN group
      5 Switch to interface mode
      6 Configure multiple VLAN group
      7 Switch to interface mode
      8 Configure multiple VLAN group
    4. This associates port1.5 through port1.7 with multiple VLAN group #5.

      Yamaha(config)# interface port1.5-7 (1)
      Yamaha(config-if)# switchport multiple-vlan group 5 (2)
      Yamaha(config-if)# exit
      1 Switch to interface mode
      2 Specify multiple VLAN group
    5. This associates port1.8 with multiple VLAN groups #1, #2, #3, #4, #5.

      Yamaha(config)# interface port1.8 (1)
      Yamaha(config-if)# switchport multiple-vlan group 1-5 (2)
      Yamaha(config-if)# exit
      1 Switch to interface mode
      2 Specify multiple VLAN group
    6. This checks the multiple VLAN group settings.

      Yamaha>show vlan multiple-vlan
      GROUP ID  Name                            Member ports
      ======== ================================ ======================
      1        Network1                         port1.1 port1.8
      2        GROUP0002                        port1.2 port1.8
      3        GROUP0003                        port1.3 port1.8
      4        GROUP0004                        port1.4 port1.8
      5        Network5                         port1.5 port1.6
                                                port1.7 port1.8

5.2. Multiple VLAN settings example 2

This configures multiple VLAN settings to achieve the following.

Hosts connected to ports 1 to 7 will connect to the Internet and other external lines, through the line to which port 8 is connected
Hosts connected to ports 1 to 7 are associated with VLAN #2 and assigned an IP address using the DHCP server functions
The IP address for VLAN #2 is 192.168.110.240/24 and the range of assigned addresses is from 192.168.110.2 to 192.168.110.191/24
Communication is blocked between hosts connected to ports 1 to 7

image

The multiple VLAN group settings are as follows.

  • port1.1: Associated with multiple VLAN group #1

  • port1.2: Associated with multiple VLAN group #2

  • port1.3: Associated with multiple VLAN group #3

  • port1.4: Associated with multiple VLAN group #4

  • port1.5: Associated with multiple VLAN group #5

  • port1.6: Associated with multiple VLAN group #6

  • port1.7: Associated with multiple VLAN group #7

  • port1.8: Associated with multiple VLAN groups #1, #2, #3, #4, #5, #6, and #7

  • Assign ports port1.1 to port1.7 to VLAN #2.

    Yamaha(config)# interface port1.1-7
    Yamaha(config-if)# switchport access vlan 2
    Yamaha(config-if)#
    Yamaha(config)# interface vlan2
    Yamaha(config-if)# ip address 192.168.110.240/24
  • Create the DHCP pool “pool_vlan2”.

    Yamaha(config)# dhcp pool pool_vlan2
    Yamaha(config-dhcp)(1)
    1 Switch to the DHCP mode
  • Specify the VLAN #2 network portion 192.168.110.0/24 in the DHCP pool.

    Yamaha(config-dhcp)# network 192.168.110.0/24
  • Specify the address assignment range from 192.168.110.2 to 192.168.110.191 in the DHCP pool.

    Yamaha(config-dhcp)# range 192.168.110.2 192.168.110.191
  • Specify the default gateway to be notified in DHCP option settings and specify the DNS server in the DHCP pool.

    Yamaha(config-dhcp)# default-router 192.168.110.240 (1)
    Yamaha(config-dhcp)# dns-server 192.168.110.1 (2)
    Yamaha(config-dhcp)# exit (3)
    1 The default gateway address is 192.168.110.240 (its own address)
    2 The DNS server address is 192.168.110.1
    3 Exit the DHCP mode
  • Activate the DHCP server functions for vlan2.

    Yamaha(config)# interface vlan2 (1)
    Yamaha(config-if)# dhcp-server enable (2)
    Yamaha(config-if)# exit (3)
    1 Switch to interface mode
    2 Enable the DHCP server functions for the interface
    3 Exit the interface mode
  • Activate the DHCP server functions for the entire system.

    Yamaha(config)# dhcp-server enable (1)
    1 Enable the DHCP server functions for the entire system
  • Associate port1.1 through port1.7 with multiple VLAN groups #1 through #7 respectively.

    Yamaha(config)# interface port1.1 (1)
    Yamaha(config-if)# switchport multiple-vlan group 1 (2)
    Yamaha(config-if)# exit
    Yamaha(config)# interface port1.2 (3)
    Yamaha(config-if)# switchport multiple-vlan group 2 (4)
    Yamaha(config-if)# exit
    Yamaha(config)# interface port1.3 (5)
    Yamaha(config-if)# switchport multiple-vlan group 3 (6)
    Yamaha(config-if)# exit
    Yamaha(config)# interface port1.4 (7)
    Yamaha(config-if)# switchport multiple-vlan group 4 (8)
    Yamaha(config-if)# exit
    Yamaha(config)# interface port1.5 (9)
    Yamaha(config-if)# switchport multiple-vlan group 5 (10)
    Yamaha(config-if)# exit
    Yamaha(config)# interface port1.6 (11)
    Yamaha(config-if)# switchport multiple-vlan group 6 (12)
    Yamaha(config-if)# exit
    Yamaha(config)# interface port1.7 (13)
    Yamaha(config-if)# switchport multiple-vlan group 7 (14)
    Yamaha(config-if)# exit
    1 Switch to interface mode
    2 Configure multiple VLAN group
    3 Switch to interface mode
    4 Configure multiple VLAN group
    5 Switch to interface mode
    6 Configure multiple VLAN group
    7 Switch to interface mode
    8 Configure multiple VLAN group
    9 Switch to interface mode
    10 Configure multiple VLAN group
    11 Switch to interface mode
    12 Configure multiple VLAN group
    13 Switch to interface mode
    14 Configure multiple VLAN group
  • Associate port1.8 with multiple VLAN groups #1 to #7.

    Yamaha(config)# interface port1.8 (1)
    Yamaha(config-if)# switchport multiple-vlan group 1-7 (2)
    Yamaha(config-if)# exit
    1 Switch to interface mode
    2 Specify multiple VLAN group
  • This checks the multiple VLAN group settings.

    Yamaha>show vlan multiple-vlan
    GROUP ID  Name                            Member ports
    ======== ================================ ======================
    1        GROUP0001                        port1.1 port1.8
    2        GROUP0002                        port1.2 port1.8
    3        GROUP0003                        port1.3 port1.8
    4        GROUP0004                        port1.4 port1.8
    5        GROUP0005                        port1.5 port1.8
    6        GROUP0006                        port1.6 port1.8
    7        GROUP0007                        port1.7 port1.8

6. Points of Caution

The points of caution regarding this function are as follows.

  • The function cannot be used in conjunction with a private VLAN.

  • The multiple VLAN group to associate with a link aggregation logical interface must be the same.

  • A multiple VLAN group is only applicable to forwarding between ports. Voluntary packets will not be affected by the settings of a multiple VLAN group.

  • Even if a multiple VLAN is configured, communication may not work correctly due to the following influences.

    • Block status of spanning tree

    • IGMP snooping/MLD snooping status

    • Blocked status of loop detection

  • In inter-VLAN routing, multiple VLAN communication restrictions are applied only to packets routed by hardware processing.
    Restrictions do not apply to inter-VLAN routing through the CPU.

  • YMPI frames are transmitted for managing Yamaha wireless access points if multiple VLANs are specified.
    Therefore, even if there are multiple Yamaha wireless access points associated with different multiple VLAN groups, the cluster management function or the wireless LAN controller function can be used.