In my last post I gave a brief introduction and how to configure VLAN, today I’m going to show us how to be a member of a VLAN.
A user can gain membership of a VLAN in two ways;
- Static VLAN membership
- Dynamic VLAN membership.
Static VLAN membership
Each and every port on a switch can be configured to belong to a VLAN, a user then becomes member of the VLAN the port is configured for. Let’s say for example interface f0/1 on a switch is configured for VLAN 100, a user connected to interface f0/1 belongs to VLAN 100
Every port on a switch belongs to VLAN 1 by default, we need to manually configure the port if we want it to belong to a different VLAN. If we want to configure more than one port to belong to the same VLAN, the “range” command is included.
Starting from where we left off, we have the following
VLAN 1 – 192.168.1.0
VLAN 2 (finance) – 192.168.2.0
VLAN 3 (Marketing) – 192.168.3.0
VLAN 4 (sales) – 192.168.4.0
VLAN 100 (Management) – 192.168.100.0
VLAN 200(Guest) – 192.168.200.0
All switch ports are by default in VLAN 1, here’s how to statically map a port to another VLAN
The “switchport mode access” command tells the switch port that it belongs to one VLAN and to carry the traffic of only that VLAN.
The “interface range” command becomes useful if we want to map more than one port to a single VLAN
After so much configuration it’s only natural that we see what we’ve done. To see the list of configured VLANs and their corresponding ports, use the “show vlan” command.
Oh, it’s all fine.
Dynamic VLAN Membership
Every device connecting to a network has a unique 48-bit MAC address, it’s a physical address that directly identifies it, unique to every device just like the fingerprint is unique to an individual.
In this method of VLAN membership, a user MAC address is preconfigured on a VLAN management policy server (VMPS) and mapped to a VLAN. When a user connects to the network switch, the switch queries the server for the VLAN which the host should be placed,and voila the user is a member of the assigned VLAN. Pretty simple!