Alcatel-Lucent Security Products Configuration Example Series

Slides:



Advertisements
Similar presentations
LAN Segmentation Virtual LAN (VLAN).
Advertisements

Virtual LANs.
Cisco 3 - Switch Perrine. J Page 15/8/2015 Chapter 8 What happens to the member ports of a VLAN when the VLAN is deleted? 1.They become inactive. 2.They.
Ethernet and switches selected topics 1. Agenda Scaling ethernet infrastructure VLANs 2.
VLANs- Chapter 3 CCNA Exploration Semester 3 Modified by Profs. Ward
Networking Components
(part 3).  Switches, also known as switching hubs, have become an increasingly important part of our networking today, because when working with hubs,
Virtual LANs. VLAN introduction VLANs logically segment switched networks based on the functions, project teams, or applications of the organization regardless.
VLANs.ppt CCNA Exploration Semester 3 Chapter 3
CCENT Study Guide Chapter 11 VLANs and Inter-VLAN Routing.
Chap 10 Routing and Addressing Andres, Wen-Yuan Liao Department of Computer Science and Engineering De Lin Institute of Technology
Voice VLANs Lecture 7 VLANs.ppt 21/04/ Apr-17
Virtual LAN Design Switches also have enabled the creation of Virtual LANs (VLANs). VLANs provide greater opportunities to manage the flow of traffic on.
Instructor & Todd Lammle
– Chapter 5 – Secure LAN Switching
Virtual Networking. Module Objectives By the end of this module participants will be able to: Understand the use of virtual LANs Create VLAN subinterfaces.
VLAN V irtual L ocal A rea N etwork VLAN Network performance is a key factor in the productivity of an organization. One of the technologies used to.
Chapter 8: Virtual LAN (VLAN)
Cisco 3 - LAN Perrine. J Page 110/20/2015 Chapter 8 VLAN VLAN: is a logical grouping grouped by: function department application VLAN configuration is.
Switch Features Most enterprise-capable switches have a number of features that make the switch attractive for large organizations. The following is a.
© 2006 Cisco Systems, Inc. All rights reserved.Cisco PublicITE I Chapter 6 1 VLANs LAN Switching and Wireless – Chapter 3.
The University of Bolton School of Games Computing & Creative Technologies LCT2516 Network Architecture CCNA Exploration LAN Switching and Wireless Chapter.
Switching Topic 2 VLANs.
Virtual Local Area Networks (VLANs) Part II
Configuring VLAN Chapter 14 powered by DJ 1. Chapter Objectives At the end of this Chapter you will be able to:  Understand basic concept of VLAN  Configure.
Chapter 4 Version 1 Virtual LANs. Introduction By default, switches forward broadcasts, this means that all segments connected to a switch are in one.
W&L Page 1 CCNA CCNA Training 2.5 Describe how VLANs create logically separate networks and the need for routing between them Jose Luis.
1 VLANs Relates to Lab 6. Short module on basics of VLAN switching.
ALSMS Upgrade Configuration Example Alcatel-Lucent Security Products Configuration Example Series.
Source NAT Configuration Example Alcatel-Lucent Security Products Configuration Example Series.
Installing the ALSMS Software on a Windows Platform Configuration Example Alcatel-Lucent Security Products Configuration Example Series.
LINCWorks Mesh Networking User Guide. This user guide will give a brief overview of mesh networking followed by step by step instructions for configuring.
Redundant Bricks Configuration Example Lucent Security Products Configuration Example Series.
LAN Switching Virtual LANs. Virtual LAN Concepts A LAN includes all devices in the same broadcast domain. A broadcast domain includes the set of all LAN-connected.
Managing Peer to Peer Protocols Lucent Security Products Configuration Example Series.
Setting up Client Tunnel Endpoints Lucent Security Products Configuration Example Series.
Applying Application Filters Configuration Example Alcatel-Lucent Security Products Configuration Example Series.
© 2006 Cisco Systems, Inc. All rights reserved.Cisco Public 1 VLANs.
Virtual Local Area Networks In Security By Mark Reed.
RUNNING GFU REPORTS Let’s Get Started!. VP’s: This is what it was.
Creating Rules and Rule Sets Configuration Example
Configuring DHCP Relay Configuration Example
Changing the IP Address on the ALSMS Server Configuration Example
Configuring and Activating a Brick Configuration Example
Chapter 2 Overview of Networking Components
Configuring ALSMS Remote Navigation
SECURITY ZONES.
Chapter 11 VLANs and Inter-VLAN Routing
LAN Switching and Wireless – Chapter 3
Virtual Local Area Networks or VLANs
Instructor & Todd Lammle
HELLO WORLD!!! Run Project 2: WELCOME Subject: Virtual LAN’s
Installing Patches on the ALSMS Server Configuration Example
Instructor Materials Chapter 6: VLANs
Virtual Local Area Networks (VLANs) Part I
– Chapter 5 – Secure LAN Switching
VLANs: Virtual Local Area Networks
Introduction to Networking
Virtual LANs.
Virtual Local Area Network
LAN Switching and Wireless – Chapter 3
Routing and Switching Essentials v6.0
Creating Administrator Accounts
70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 4: Planning and Configuring Routing and Switching.
Chapter 3 VLANs Chaffee County Academy
Creating Users and user Groups Configuration Example
Virtual LAN VLAN Trunking Protocol and Inter-VLAN Routing
LAN Switching and Wireless – Chapter 3
LAN Switching and Wireless – Chapter 3
Creating Services and Service Groups Configuration Example
Presentation transcript:

Alcatel-Lucent Security Products Configuration Example Series Configuring VLAN’s Alcatel-Lucent Security Products Configuration Example Series

What is a VLAN? A VLAN is a collection of hosts on different physical segments of a switched network that communicate with each other as if they were on the same segment. VLAN’s allow network administrators to define multiple LAN’s on a single collection of switches. One useful way to think of VLAN’s is that the combination of the VLAN and the physical port form a virtual port. From this point of view, a trunk port is simply a collection of many virtual ports.

Examples of VLAN’s

What is the purpose of VLAN’s? There are many reasons to use VLAN’s. The most common reason is to segregate your broadcast domain keeping individual groups in their own broadcast domains, or on their own networks. An example of a VLAN application would be if you have multiple departments in one location. You would put your Accounting Department on one VLAN and your Engineering Department on another. You might have a case where you have part of both departments in two separate buildings or locations. You could then still keep them on their own network (broadcast domain) by assigning VLAN tags to their traffic. So for instance even though there are two locations you could have all of your accountants on VLAN 101 and all of your engineers on VLAN 102. VLAN tags are generally assigned at Ethernet switches, though they can also be assigned at routers or firewalls.

VLAN Features on a Brick Bricks can serve many functions when working with VLAN’s: They can respect existing tags applied by another device. They can strip tags They can strip tags and reassign different tags They can firewall different VLAN’s differently by applying different rule sets to different VLAN’s on the same interface. They can also firewall different VLAN’s differently in the same rule set by applying only certain rules to certain VLAN’s The most common use is to respect existing tags set by a switch and to assign one firewall to each VLAN. This configuration example assumes that your switches are assigning the tags and that you are already familiar with the concepts of VLAN’s.

Configuring VLAN’s Internet Buffalo engineers VLAN 101 NJ engineers This diagrams assumes that there are routers and NAT is running on the routers In this example we will essentially configure a Brick for this network Our goal is to connect the Buffalo Engineers to the NJ Engineers as if they are on the same physical network The same will need to be done on both Bricks We can do this in just a few steps

Configuring VLAN’s Open your ALSMS Navigator and choose the Brick that will be handling the VLAN’s Click on Always Show VLAN Information. This will add two additional tabs at the top of the screen. Once saved this information will permanently be displayed for this Brick

Configuring VLAN’s Next click on the Physical Ports Tab and double click on the port where you want to pass VLAN traffic. Here you will see 5 new fields related to VLAN’s as shown on the following slide. VLAN Domain leave this field blank unless the Brick is positioned between two switches with different numbering schemes. If it is, refer to the manual. Default VLAN ID leave this at 1. This is to handle any data that is untagged. VLAN Membership This is where you fill in the VLAN tag that you want to pass and filter. This can be individual tags, tags separated by comma’s or a range of tags separated by a dash. Receive Format the frame format allowed into this port. Set at either 802.1Q or Any.

Configuring VLAN’s Transmit Format Set this to Preserve This means that the packet is sent in the same format as it was received, no change to the tag. For more detail on these 5 fields see chapter six in the Administrative Guide. Click OK. Next you will either create the rule set that you want to apply to VLAN 101 or use an existing rule set. Create it just as you would any other rule set.

Configuring VLAN’s Your rule set may be just as simple as this one where you are passing everything between those two groups of engineers. Don’t worry about the VLAN Match here. You would use that if you had multiple VLAN’s going through one rule set, yet wanted to assign certain rules only to one VLAN. Leave that field with the wild card for now.

Configuring VLAN’s Next go back to your Brick Editor and select the Policy Assignment tab. Assign your new rule set to the physical port that the VLAN is connected to. Note when you assign it you will change the Zone VLAN ID’s field to Port Default. Remember that under the Physical ports tab on slide number 9 you set your VLAN Membership to 101. That is the default that you are matching here.

Configuring VLAN’s Once you save your work and do a save and apply to the Brick your engineers in Buffalo and NJ should be able to pass data to each other as if they are on the same LAN. This is only one simple example. You can get a lot fancier than this. The VLAN features of the Brick are rich and leave room for great creativity. If you now want to add another VLAN to your physical port one you would basically just go through the steps again. All you would need to do is modify the firewall. By adding a rule for all of the accountants, for example, to communicate you would just add a second rule to your rule set and add VLAN 102 to your VLAN Membership on Port 1. This is a fairly simple example. Much more detail can be found in the Administrative Guide.

AALSMS Upgrade Configuration Example For more detailed information on configuring VLAN’s go to chapter 6 in the Administrative Guide “Configuring VLAN’s on Bricks”. From the AALSMS you can access the manuals by clicking- Help>On Line Product Manuals>(choose manual)