V1: port 1-8, untagged Shared Server(s) or Internet Gateway V2: port 9-16, untagged VLAN2 users (PC or hub/switch) V3: port 17-24, untagged VLAN3 users (PC or hub/switch) Requirement: 1.V2 and V3 can access V1 for shared Server (with IPX, IP, AppleTalk, NetBEUI etc) or Internet Gateway 2.V2 and V3 cannot see each other V x Gw V x Gw V1, Servers x V1, Internet Gateway ISP Example 1: Asymmetric VLAN at a standalone DES-3226S

Example 1: Asymmetric VLAN at standalone Des3226S enable asymmetric_vlan create vlan v2 tag 2 create vlan v3 tag 3 config vlan v2 add untagged 1-16 config vlan v3 add untagged 1-8,17-24 config gvrp 1-8 pvid 1 config gvrp 9-16 pvid 2 config gvrp pvid 3 save PVID and VLAN settings: ports pvid defaultE..EE..EE..E U..UU..UU..U V2E..EE..E-..- U..UU..U-..- V3E..E-..-E..E U..U-..-U..U Test: 1.V2 PC can access (ping) V1 servers and Internet Access is OK. 2V3 PC can access (ping) V1 servers and Internet Access is OK. 3V2 PC cannot see V3 PC, and V3 PC cannot see V2 PC.

V1: S1port1-4, S2port1-4, untagged Shared Server(s) or Internet Gateway S1port 5-8, S2 port 5-8, tagged for uplink/downlink to other switches V2: S1port 9-16, S2port9-16,untagged VLAN2 users (PC or hub/switch) V3: S1port17-24, S2port17-24, untagged VLAN3 users (PC or hub/switch) Requirement: 1.V2 and V3 can access V1 for shared Server (with IPX, IP, AppleTalk, etc) or Internet Gateway 2.V2 and V3 cannot see each other V x Gw V x Gw V1, Servers x V1, Internet Gateway ISP T T V x Gw V x Gw V1, Servers x Example 2: Asymmetric VLAN across two standalone but cascaded DES-3226S S1 S2

enable asymmetric_vlan create vlan v2 tag 2 create vlan v3 tag 3 config vlan default delete 5-8 config vlan default add tagged 5-8 config vlan v2 add untagged 1-4,9-16 config vlan v2 add tagged 5-8 config vlan v3 add untagged 1-4,17-24 config vlan v3 add tagged 5-8 config gvrp 1-8 pvid 1 config gvrp 9-16 pvid 2 config gvrp pvid 3 save ports pvid defaultE..E E..EE..EE..E U..UT..TU..UU..U V2E..E E..EE..E-..- U..UT..TU..U-..- V3E..E E..E-..-E..E U..UT..T-..-U..U S1 settings Example 2: Asymmetric VLAN across two standalone Des-3226S

S2 settings Test: 1.V2 PC (at S1 or S2) can access (ping) V2 PC (at S1 or S2). 2.V3 PC (at S1 or S2) can access (ping) V3 PC (at S1 or S2).  Members across switch is OK. 3.V2 PC (at S1 or S2) can access V1 servers and Internet Access is OK. 4.V3 PC (at S1 or S2) can access V1 servers and Internet Access is OK.  Shared VLAN is OK. 5.V2 PC (at S1 or S2) cannot see V3 PC (at S1 or S2), 6.V3 PC (at S1 or S2) cannot see V2 PC (at S1 or S2).  No access between VLANs ports pvid defaultE..E E..EE..EE..E U..UT..TU..UU..U V2E..E E..EE..E-..- U..UT..TU..U-..- V3E..E E..E-..-E..E U..UT..T-..-U..U enable asymmetric_vlan create vlan v2 tag 2 create vlan v3 tag 3 config vlan default delete 5-8 config vlan default add tagged 5-8 config vlan v2 add untagged 1-4,9-16 config vlan v2 add tagged 5-8 config vlan v3 add untagged 1-4,17-24 config vlan v3 add tagged 5-8 config gvrp 1-8 pvid 1 config gvrp 9-16 pvid 2 config gvrp pvid 3 save Example 2: Asymmetric VLAN across two standalone Des-3226S

Example 3: Asymmetric VLAN at Stacking DES-3226S V x Gw V x Gw V1, Servers x V1, Internet Gateway ISP V1: port 1-8, untagged Shared Server(s) or Internet Gateway V2: U1port 9-16, U2port9-16, untagged VLAN2 users (PC or hub/switch) V3: U1port 17-24,U2 port17-24 untagged VLAN3 users (PC or hub/switch) Requirement: 1.V2 and V3 can access V1 for shared Server (with IPX, IP, AppleTalk, NetBEUI etc) or Internet Gateway 2.V2 and V3 cannot see each other V x Gw V x Gw U1 U2

Settings ports pvid defaultE..E E..EE..E U..UU..UU..U V2E..E E..E-..- U..UU..U-..- V3E..E -..-E..E U..U-..-U..U U1 settingU2 setting ports pvid defaultE..EE..EU..U V2E..E-..- U..U-..- V3-..-E..E -..-U..U

Setting enable asymmetric_vlan create vlan v2 tag 2 create vlan v3 tag 3 config vlan v2 add untagged 1:1-1:16,2:9-2:16 config vlan v3 add untagged 1:1-1:8,1:17-1:24,2:17-2:24 config gvrp 1:1-1:8 pvid 1 config gvrp 1:9-1:16,2:9-2:16 pvid 2 config gvrp 1:17-1:24,2:17-2:24 pvid 3 save Command: Testing: 1.V2 PC in U1 can access (ping) V1 servers and Internet Access is OK. 2.V2 PC in U2 can access (ping) V1 servers and Internet Access is OK. 3.V3 PC in U1 can access (ping) V1 servers and Internet Access is OK. 4.V3 PC in U2 can access (ping) V1 servers and Internet Access is OK. 5.V2 PC in U1 can see V2 PC in U2, and V3 PC in U1 can see V3 PC in U2. 6.V2 PC in U1 and U2 cannot see V3 PC in U1 and U2, and V3 PC in U1 and U2 cannot see V2 PC in U1 and U2.

V1: S1,U1,U2 port1-4, S2port1-4, untagged Shared Server(s) or Internet Gateway S1,U1 port 5-8, S2 port 5-8, tagged for uplink/downlink to other switches V2: S1,U1,U2 port 9-16, S2 port9-16,untagged VLAN2 users (PC or hub/switch) V3: S1,U1,U2 port17-24, S2port17-24, untagged VLAN3 users (PC or hub/switch) Requirement: 1.V2 and V3 can access V1 for shared Server (with IPX, IP, AppleTalk, etc) or Internet Gateway 2.V2 and V3 cannot see each other V x Gw V x Gw V1, Servers x V1, Internet Gateway ISP T T V x Gw V x Gw V1, Servers x Example 4: Asymmetric VLAN across stacked DES-3226S and a standalone DES- 3226S S1 S2 U1 U2

Settings enable asymmetric_vlan create vlan v2 tag 2 create vlan v3 tag 3 config vlan default delete 1:5-1:8 config vlan default add tagged 1:5-1:8 config vlan v2 add untagged 1:1-1:4,1:9-1:16,2:1- 2:4,2:9-2:16 config vlan v2 add tagged 1:5-1:8 config vlan v3 add untagged 1:1-1:4,1:17- 1:24,2:1-2:4,2:17-2:24 config vlan v3 add tagged 1:5-1:8 config gvrp 1:1-1:8,2:1-2:4 pvid 1 config gvrp 1:9-1:16,2:9-2:16 pvid 2 config gvrp 1:17-1:24,2:17-2:24 pvid 3 save ports pvid defaultE..E E..EE..EE..E U..UT..TU..UU..U V2E..E E..EE..E-..- U..UT..TU..U-..- V3E..E E..E-..-E..E U..UT..T-..-U..U S1,U1 settings S1,U2 setting ports pvid defaultE..E E..EE..E U..U U..UU..U V2E..E E..E-..- U..U U..U-..- V3E..E -..-E..E U..U -..-U..U

S2 settings Test: 1.V2 PC (at S1 or S2) can access (ping) V2 PC (at S1 or S2). 2.V3 PC (at S1 or S2) can access (ping) V3 PC (at S1 or S2).  Members across switch is OK. 3.V2 PC (at S1 or S2) can access V1 servers and Internet Access is OK. 4.V3 PC (at S1 or S2) can access V1 servers and Internet Access is OK.  Shared VLAN is OK. 5.V2 PC (at S1 or S2) cannot see V3 PC (at S1 or S2), 6.V3 PC (at S1 or S2) cannot see V2 PC (at S1 or S2).  No access between VLANs ports pvid defaultE..E E..EE..EE..E U..UT..TU..UU..U V2E..E E..EE..E-..- U..UT..TU..U-..- V3E..E E..E-..-E..E U..UT..T-..-U..U enable asymmetric_vlan create vlan v2 tag 2 create vlan v3 tag 3 config vlan default delete 5-8 config vlan default add tagged 5-8 config vlan v2 add untagged 1-4,9-16 config vlan v2 add tagged 5-8 config vlan v3 add untagged 1-4,17-24 config vlan v3 add tagged 5-8 config gvrp 1-8 pvid 1 config gvrp 9-16 pvid 2 config gvrp pvid 3 save

Limitation The IGMP Snooping can’t support Asymmetric VLANs. In DES-3226, IGMP snooping also can’t support Asymmetric VLANs.