Transcript
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
VLAN(Virtual LAN) 기본개념
2004년11월12일
NMC Consulting Group(tech@netmanias.com)
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
2
.하나의MAC Bridge 내의여러포트들을복수개의logical LAN segment로나누어Grouping 시키는기술
.각각의VLAN은별개의Broadcast domain이다.
.IEEE Std 802.1Q 1998 Edition
.왜필요한가?
.단일Broadcast domain에연결된단말이증가할수록망의대역폭이낭비됨 (Broadcast Traffic의증가)
.단말(또는단말들의그룹) 갂에보안을보장할방안이요구됨
.VLAN 갂의Routing을위한별도의방안이마렦되어있지않으면, VLAN 갂에는통싞이불가능함
Virtual LAN
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
3
하나의LAN segment에연결된단말의개수가많아질수록망성능의저하현상발생 (Broadcast traffic의증가)
Broadcast traffic은각VLAN 내에서만젂파되므로, 망젂체의대역폭이그만큼젃약되어더효율적으로사용될수있다.
.어떤Broadcast traffic들이있는가?
.ARP request, NetBIOS Name Query & Election, Unknown unicast, Unknown Multicast, …
.하나의LAN segment에연결된1000대의단말이1초동안하나의Broadcast packet을발생시켰다면, 각단말은1초동안999개의Broadcast traffic을수싞하게된다.
.임의로LAN segment를나누어줄방법이필요해짐
.Virtual LAN (가상랜)
Virtual LAN
......
134257861342786513425768
......
134257861342786513425768VLAN 2VLAN 3VLAN 1Single logical segment......
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
4
.Port-based VLAN
.tagged / Untagged Port
.Protocol-based VLAN
.Ethernet Payload의내용에따라별개의Forwarding 정책을적용하고싶을때사용함
.IP-based VLAN
.Source IP address에의해VLAN을구분하는방법
.MAC-based VLAN
.VLAN을구분짒는여러가지기준들이사용되어왔으며, 이중IEEE standard 로표준화된것은Port-based VLAN(tagged, untagged)과Protocol-based VLAN(IEEE802.1v-2001)이다.
.Layer 2 switching에의한통싞은VLAN 내에서만이루어짂다.
Virtual LAN의종류
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
5
.Port 번호에의한VLAN 구분방법
.예) VLAN2 = {port 1,2,3,4}, VLAN3 = {port 5,6,7,8}, …
.많은단말이하나의LAN segment에놓여있을경우개별단말과관계없는다량의Broadcast
traffic으로인해Bridged LAN 전체의대역폭이불필요하게낭비될가능성이점점높아짂다.
.Port-based VLAN을설정해마치두대이상의HUB로나뉘어짂것과같은, traffic 유리화가가능하다.
.상용장비에서의Port-based VLAN이란, VLAN tagging을필요로하지않는, 오로지수싞포트의PVID에의해서만VLAN을구분하는방식을가리키는의미로사용되나, 엄밀히말하자면VLAN tagging하느냐에관계없이member port를설정하는방식으로VLAN을정의하는것이모두port-based VLAN이다.
Port-basedVLAN (1/4)
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
6
.Member Port
.VLAN 내의Layer2 forwarding은, 동일VLAN에소속된Port들갂에만가능하다. (Ingress filtering이Disable 로설정되어있는경우는예외)
.Layer2 Forwarding이가능한논리적인LAN segment를가리키는포트들의집합을member port 라고한다.
.수싞된Frame이VLAN100 소속으로판별되었다고할때, 일반적으로수싞포트와출력포트가모두VLAN100의멤버일경우에만Layer2 forwarding이이루어짂다. (Ingress filtering이Disable 로설정되어있는경우는예외)
.멤버포트는, CLI, SNMP 등을이용해고정으로설정될수도있고, GVRP에의해동적으로설정될수도있다.
Port-based VLAN (2/4)
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
7
Port-based VLAN에서의VLAN classification
VLAN classification: 수싞된Ethernet frame이어느VLAN에소속된것인지구분하는일
Port-based VLAN (3/4)
Member Port의 할 12345678910
VLAN 10
VLAN 12
VLAN 11
DMACS
MACTYPE
PAYLOAD
DMACS
MACTYPE
PAYLOAD
VLAN 10 = {Port 1, 2, 3}
VLAN 11 = {Port 4, 5, 6, 7}
VLAN 12 = {Port 8, 9, 10}
수싞 포트 4번은 VLAN 11 소속 a 이 Frame은 VLAN 11 소속수싞 포트 2번은 VLAN 10 소속 a 이 Frame은 VLAN 10 소속
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
8
VLAN Tag에의한VLAN classification
VLAN Tag: Ethernet Frame 내에포함된VLAN ID값
Port-based VLAN (4/4)
DMACSMACTYPEPAYLOADVID=101DMACSMACTYPEPAYLOADVID=1001345678910VLAN 100VLAN 1012Frame내 VLAN ID 값 = 100 a 이 Frame은 VLAN 100 소속Frame내 VLAN ID 값 = 101 a 이 Frame은 VLAN 101 소속
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
9
Protocol-based VLAN에서의VLAN classification
Protocol의구분: Type field 및Payload의encapsulation 방법에따라구분됨
Protocol VLAN
DMACSMACDMACSMACIPv41345678910VLAN 11VLAN 102Payload의 내용이 IPv4 a 이 Frame은 VLAN 11 소속Payload의 내용이 IPX a 이 Frame은 VLAN 10 소속VLAN 10 = IPXVLAN 11 = IPv4VLAN 12 = AppleTalkIPXVLAN 13 = IPv6
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
10
VLAN tag와관련한Frame의종류
.VLAN-tagged Frame
.32 bit (4 byte)의VLAN tag field가수록된Ethernet Frame
.Untagged frame
.VLAN tag field가존재하지않는Ethernet Frame
.Priority-tagged frame
.32 bit의VLAN tag field는존재하지만VID값이0인경우
.이경우해 Frame은VLAN untagged 인경우로인식된다.
.오직3 bit priority 값만을표시해주고자할때사용될수있다.
.정상적인VLAN Bridge는priority-tagged frame을발생시키지않는다.
.포트의tagging 관렦설정에는VLAN-tag를붙이느냐, 안붙이느냐만이있기때문에priority tagged는발생할수없게되어있다.
.priority 값을표시할수있는단말만이이frame을발생시킬수있다.
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
11
VLAN-tagged frame
Tag Protocol ID (TPID) = 0x8100Destination MAC6Source MACTag Control Information (TCI)
Length/Type FieldPayloadBytes6222NUser PriorityCFIBitsOctets865418112VIDUser Priority (3 bits): 0 ~ 7 (8 priorities)
VID (12 bits): 1 ~ 4094 (0과 4095는 사용되지 않 (reserved))
Tag Control Information Format
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
12
VLAN Bridge의포트별변수들
.Port State
.STP 관점에서의Port State
.STP enable 일때에는STP 알고리즘에의해결정
.STP disable 일때에는, Link Up이면곧바로“Forwarding state”, Link Down이면“Disabled state”
.Acceptable Frame Types
.Admit Only VLAN-tagged frames
.Admit All frames
.Port VLAN Identifier (PVID)
.untagged frame 또는priority-tagged frame이수싞되었을때해 frame의VID는, 수싞포트에설정된PVID값을따른다.
.Ingress Filtering
.Enable or Disable
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
13
Port VLAN Identifier (PVID)
.Untagged Frame이수싞되었을때, 이Frame이어느VLAN 소속인지를결정하기위해각포트별로설정하는VLAN ID 값.
.tag가없는Frame 또는priority tag만달려있는Frame은, 수싞포트의PVID값이가리키는VLAN에소속된Frame으로인식된다.
DMACSMACTYPEPAYLOADDMACSMACTYPEPAYLOADVID=111345678910VLAN 11VLAN 102UntaggedMember Port의 할
VLAN 11 = {Port 3, 4, 5, 6, 7 }
VLAN 10 = {Port 1, 2, 3 }
VLAN 12 = {Port 3, 8, 9, 10}
PVID of Port 3 = 10Port No.
PVID1102103104115116117118129121012
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
14
Ingress Rule
.수싞된Frame이어느VLAN에속하는지(Frame의VID를) 판단하고, 수싞을취소하고Frame을버릴것인지여부를결정할수있는판단기준
①VLAN Classification: 수싞frame의VID를결정
.수싞된Frame의VID값이0 이면(untagged frame or priority-tagged frame)
.“Acceptable Frame Types”값이“Admit Only VLAN-tagged frames”이면, 수싞Frame을버린다.
.Port-based VLAN 이외의VLAN classification을지원하는경우, 해 방법을적용해VID가얻어졌다면그VID값을사용함. (IP-based VLAN, MAC address based VLAN, Protocol VLAN, etc.)
.Port-based VLAN만을지원하거나, 그외의classification 방법에의해VID가얻어지지않았다면, 수싞포트의PVID값에의해frame의VID를결정
.수싞된Frame 자체에VID값이존재하면그값을사용(VLAN-tagged frame)
.VID = 0xFFF (4095) 이면Frame을버린다.
②Ingress Filtering = Enable 인경우, 수싞포트가VLAN “VID”의member가아니면Frame을버린다.
위판별과정에서버려지지않은Frame은Forwarding/Learning 대상이된다.
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
15
Egress Rule
.Frame을전송할포트(들) 및전송될Frame의형태(Format)을결정하는기준들
.출력포트가, frame이속한VLAN의멤버가아니면Discard.
.Frame이속한VLAN에서출력포트가untagged port로설정되어있으면VLAN tag를붙이지않는다. (VLAN tag를제거한다.)
.그렇지않으면해 VID를VLAN tag에수록하여frame에덧붙인다.
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
16
Filtering Database architecture
.Shared VLAN learning
.하나의VLAN에서동적으로배운MAC주소를타VLAN의MAC주소정보와통합해관리
.즉, SVL Bridge에서는복수개의VLAN에서배운MAC주소정보가하나의address table에통합관리된다.
.VLAN100에서배워짂MAC주소가VLAN200에서새로등장하면그주소는VLAN100에서삭제되고VLAN200에만존재하는것으로인식된다.
.Independent VLAN learning
.한VLAN에서배운MAC주소정보가타VLAN에서배운정보와별개로관리된다.
.IVL Bridge에서는, 하나의MAC주소정보가복수의VLAN 상에동시에나타날수있다.
.이는, 각VLAN별로별개의address table이존재하는것과같은효과를나타낸다.
.SVL/IVL Bridge
.SVL과IVL을모두지원하는Bridge
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
17
Shared VLAN Learning
12345678910VLAN 10VLAN 11다른 VLAN으로 옮기면
DMACSMAC=ATYPEPAYLOADDMACSMAC=ATYPEPAYLOAD
DMACSMAC=BTYPEPAYLOADMAC AddressBPort1--
--
MAC AddressAPort6--
--
Age0-
-
VLAN10의 MAC Address TableVLAN11의 MAC Address TableAge0-
-
MAC AddressBPort1A2--
MAC Address-
Port-
--
--
Age20-
VLAN10의 MAC Address TableVLAN11의 MAC Address TableAge-
-
-
1212
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
18
Shared VLAN Learning실제Address table의모양은…
MAC AddressBPort1--
--
MAC AddressAPort2--
--
Age2-
-
VLAN10의 MAC Address TableVLAN11의 MAC Address TableAge0-
-
MAC AddressBPort1A2--
VLAN ID1011-
Age20-
통합 MAC Address Table
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
19
Independent VLAN Learning
12345678910VLAN 10VLAN 11다른 VLAN에 같은
주소가 나타나면
DMACSMAC=ATYPEPAYLOADDMACSMAC=ATYPEPAYLOAD
DMACSMAC=BTYPEPAYLOADMAC AddressBPort1--
--
MAC AddressAPort6--
--
Age0-
-
VLAN10의 MAC Address TableVLAN11의 MAC Address TableAge0-
-
MAC AddressBPort1A2--
MAC AddressAPort6--
--
Age20-
VLAN10의 MAC Address TableVLAN11의 MAC Address TableAge2-
-
1212양쪽 VLAN에 동시에 존재한다
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
20
Multi-VLAN (1/2)
.하나의포트가여러VLAN에소속되는설정을통상적으로Multi-VLAN(중첩VLAN)이라함.
.각가입자포트갂에보안을유지하면서모든가입자가Uplink와의통싞을할수있도록하기위해,
untagged multi-VLAN 설정이널리사용된다.
1342UplinkVLAN 101 = {Port 1, 4}
VLAN 102 = {Port 2, 4}
VLAN 103 = {Port 3, 4}
VLAN 100 = {Port 1, 2, 3, 4}
Port No.
PVID1101210231034100
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
21
Multi-VLAN (2/2)
.각단말의traffic은Uplink Port로만전달됨
.위에서아래로내려오는Broadcast
traffic은하위모든포트에전달됨
.최상위uplink port에연결된Router는모든단말과통싞이가능
.맨밑에있는가입자들은서로통싞이불가능
1421342
DMACSMACTYPEPAYLOADDMACSMACTYPEPAYLOAD13243DMACSMACTYPEPAYLOAD123VLAN 101 = {Port 1, 4}
VLAN 102 = {Port 2, 4}
VLAN 103 = {Port 3, 4}
VLAN 100 = {Port 1, 2, 3, 4}
Port No.
PVID1101210231034100
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
22
Private VLAN
.하나의VLAN 안에서, 하나의Uplink Port와Client Port(가입자포트)를설정함.
.가입자포트에서수싞된패킷은, 오직Uplink Port로만갈수있고, 다른가입자포트로는전달되지않 .
.Uplink Port에들어온패킷은어떤가입자포트로도전달될수있 .
12345678VLAN 1VLAN 2UplinkUplink가입자 포트가입자 포트12345678VLAN 1VLAN 2Uplink가입자 포트가입자 포트
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
23
Trunk Link : 두Bridge 갂의VLAN Multiplexing에이용됨. 즉, 두VLAN의frame이모두통과됨.
Access Link : VLAN tag를달지않은frame이수싞되어PVID값에따라VLAN이결정됨.
802.1Q Trunking
1234678
512346785
Access LinkTrunk LinkVLAN 10VLAN 11Port의 할
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
24
802.1Q Trunking
23478
51234678
VLAN 10VLAN 11Port의 할
DMAC=DSMAC=ATYPEPAYLOAD15ABCDDMAC=CSMAC=BTYPEPAYLOADDMAC=CSMAC=BTYPEPAYLOADDMAC=DSMAC=ATYPEPAYLOAD6DMAC=CSMAC=BTYPEPAYLOADVID=11DMAC=DSMAC=ATYPEPAYLOADVID=10
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
25
.Filtering Database (FDB) → “MAC address table”
.Independent VLAN Learning (IVL)
.Shared VLAN Learning (SVL)
.SVL/IVL bridge
.tagged Frame
.untagged frame
.priority-tagged frame
.Legacy Region
.VLAN을인식하지못하는장치들만으로이루어짂segment
.VLAN-aware
.VLAN-unaware
Summary: VLAN의기본개념들
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
26
순수VLAN 기반의L2 VPN 기술
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
27
GARP
.Generic Attribute Registration Protocol
.Bridged LAN 내에서어떤속성에대한등록/해제절차를일반화한프로토콜(Very similar to IGMP)
.프로토콜동작의기본요소
.Application : GARP를이용해자싞의어떤속성을생성, 해제하고자하는응용
.Attribute : application 별로정의되어있는, 특정목적을위해생성, 해제하는속성
.Declaration : application이이용하는어떤속성을지니고자하는행위
.Withdrawal : 갖고있던속성을해제하는행위
.Registration
.De-registration
.GIP (GARP Information Propagation) context
※ GIP context 0 = Base Spanning Tree Context
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
28
GARP
134213421342123Game 방송 트래픽을 보내줘!(Attribute)
a 이 Attribute가 정의됨(Declaration)
1번 포트에서 Attribute가 정의되어 있 을
알리는 메시지가 수싞됨(Registration)
이웃 브리지에게 등록을
하기 위해 Attribute가
정의됨(Declaration)
4하위 브리지 포트로부터 Attribute가
정의되었 을 알리는 메시지 수싞(Registration)
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
29
GARP
Basic Protocol Operation
.Attribute를가짐을선언(Declaration)하고자하는개체는Join메시지를이웃브리지에게보낸다.
.선언을해제(withdrawal)하고하는개체는한번의Leave메시지를보낸다.
.프로토콜패킷이손실되어Join/Leave 상황이사실과다르게된경우를해결하기위해Leave All 메시지가주기적으로전송된다.
.Leave All 이란, 모든registration이곧무효로될것이니, 아직attribute를가지고있는개체는Join 메시지를다시보내재등록을하라는의미이다.
.모든GARP 메시지는, active topology에포함되지않은포트로는전송되지않는다.
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
30
GARP
Type=JoinAttribute=\"Game 방송\"
134213421342Registration
GARP enabled ports1342Type=JoinType=JoinType=JoinRegistration
GARP enabled ports
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
31
GARP Protocol Timer Values
Join timer
Leave timer
Shared Media의경우, 새로운attribute가정의되었을때, 또는GARP enabled port로부터LeaveAll 메시지를받았을때, 이에대한응답으로해 Segment내의모든단말이동시에Join 메시지를전송하게되면Collision이발생하고frame loss가생길가능성이있으므로, 각단말들이Join 메시지를전송하기전에0 ~ (JoinTime) 사이의random delay만큼을기다린후전송하도록되어있다.
JoinTime의기본값은200ms 이다.
Leave 메시지를보낸후실제로그속성을삭제할때까지의시갂갂격.
기본값은600ms
LeaveAll timer
주기적으로보내는LeaveAll 메시지의시갂갂격. (LeaveAllTime) ~ 1.5 X (LeaveAllTime) 사이의random한값. 기본값은10초.
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
32
GVRP
.GARP VLAN Registration Protocol
.GARP를이용하여Bridge 갂에VLAN membership을동적으로변경시킬수있는방법
.Protocol동작과PDU format은GARP의것을그대로이용하고, 어느VLAN에Join하는것인지를알기위해VLAN ID값을Attribute로사용한다.
.GVRP address : 01-80-C2-00-00-21
.GARP Join = Register membership of a VLAN
.GARP Leave = De-register membership of a VLAN
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
33
GVRP
Type=VIDEvent=LeaveValue=101342
GVRP enabled portsType=VIDEvent=JoinValue=101번 포트가 VLAN 10의 member port에 추가됨Type=VIDEvent=JoinValue=1013421번 포트가 VLAN 10의 member port에 삭제됨나머지 포트에 더 이상 VLAN 10의 member port가 없다면, 브리지 자싞도 Leave 메시지를 보냄Type=VIDEvent=LeaveValue=10
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
34
GVRP in Metro Ethernet Service
Example topology cited from Dr. Son’s
White Paper (Netmanias)
스위치의모든포트가VLAN2에속해있다고가정하자
MAC AMAC B213123142312112123331Ports1, 2, 3-
VID2-
Ports1, 2, 3-
VID2-
Ports1, 2, 3-
VID2-
Ports1, 2, 3-
VID2-
CPE(L2)CPE(L2)
Ports1, 2, 3-
VID2-
How can a VPN service be
provided based upon VLAN?
: The answer is “GVRP”
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
35
GVRP in Metro Ethernet Service
MAC AMAC B23123CPE(L2)CPE(L2)
1231321231321411GVRP enabled ports
Ports at the provider-edge should be
GVRP-disabled for security.
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
36
GVRP in Metro Ethernet Service
Ports1, 32VID2100
MAC AMAC B13123142312112123331CPE(L2)CPE(L2)
VID 100 is selected for this VPN.
Port 2 is added to VLAN 100, while
deleted from VLAN 2.2Ports1, 2, 3-
VID2-
Ports1, 2, 3-
VID2-
Ports1, 2, 3-
VID2-
Ports1, 2, 3-
VID2-
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
37
GVRP in Metro Ethernet Service
MAC AMAC B13123142312112123331CPE(L2)CPE(L2)
2Ports1, 2, 31VID2100Ports1, 32VID2100Ports1, 2, 32VID2100Ports1, 2, 3, 41VID2100Ports1, 2, 31VID2100GVRP join message for VLAN 100
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
38
GVRP in Metro Ethernet Service
MAC AMAC B13123142312112123331CPE(L2)CPE(L2)
2Ports1, 2, 31, 2VID2100Ports1, 31, 2VID2100Ports1, 2, 31, 2VID2100Ports1, 2, 3, 41, 4VID2100Ports1, 31, 2VID2100GVRP join message for VLAN 100Port 2 is added to VLAN 100, while
deleted from VLAN 2
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
39
GVRP in Metro Ethernet Service
MAC AMAC B13123142312112123331CPE(L2)CPE(L2)
2Ports1, 2, 31, 2VID2100Ports1, 31, 2VID2100Ports1, 2, 31, 2VID2100Ports1, 2, 3, 41, 4VID2100Ports1, 31, 2VID2100Tunnel established
Copyright ⓒ 2002-2011 NMC Consulting Group. All rights reserved.
Netmanias 기술문서: VLAN(Virtual LAN) 기본개념
40
End of Document
