# Multiple VLAN

## 1. Function Overview

On a multiple VLAN, by associating a port with a multiple VLAN group, you can block traffic from ports that do not belong to the same multiple VLAN group.
You can also join a single port to multiple VLAN groups.
By using this function, it is easy to handle requests to block only traffic between terminals, such as the example below.

## 2. Definition of Terms Used

None

## 3. Function Details

### 3.1. Operating specifications

Use the switchport multiple-vlan group command to configure a multiple VLAN group.
Multiple VLANs can be configured as LAN/SFP ports and link aggregation logical interfaces.
If you wish to configure a multiple VLAN group for a trunk port, this will be applied to all relevant VLANs that belong to the port in question.
The multiple VLAN group settings will also be applied to a multicast frame.

This can be used together with the following functions. Control of traffic enable/disable for these functions is set according to the multiple VLAN group settings.

- Port-based VLAN/tagged VLAN/voice VLAN

- Port authentication

A multiple VLAN can contain up to 256 groups.

Use the show vlan multiple-vlan group command to confirm the setting status for the interface of each multiple VLAN group.

### 3.2. Examples of traffic between multiple VLAN groups

When using multiple VLAN group settings (Group #1 through #4) as shown in the diagram above, enabling/disabling traffic between specific ports A/B and the reasons for such as shown in the table below.

Port number A (group) | Port number B (group) | Traffic enable/disable | Reason
--- | --- | --- | ---
port1.1 (Group 1) | port1.2 (Group 2) | Disabled | The multiple VLAN group is different
port1.1 (Group 1) | port1.3 (Group 1) | Enabled | Associated with multiple VLAN group #1
port1.2 (Group 2) | port1.4 (Group 2) | Enabled | Associated with multiple VLAN group #2
port1.5 (Group 3) | port1.7 (Group 3,4) | Enabled | Associated with multiple VLAN group #3
port1.6 (no group) | port1.8 (Group 4) | Disabled | The multiple VLAN group is different
port1.7 (Group 3,4) | port1.8 (Group 4) | Enabled | Associated with multiple VLAN group #4

Also, traffic can be established between ports that are not associated with a multiple VLAN group, so long as it is within the same VLAN.

### 3.3. Communication example when inter-VLAN routing is possible

Inter-VLAN routing is possible with L3 switches with routing enabled. In inter-VLAN routing, packets that are routed by hardware can be controlled by multiple VLAN groups.
When using multiple VLAN group settings (Group #1 through #2) as shown in the diagram above, enabling/disabling traffic between specific ports A/B and the reasons for such as shown in the table below.

Port number A (group) | Port number B (group) | Traffic enable/disable | Reason
--- | --- | --- | ---
port1.3 (Group 1) | port1.5 (Group 1) | Enabled | Associated with multiple VLAN group #1
port1.4 (Group 1) | port1.8 (Group 2) | Disabled | The multiple VLAN group is different

## 4. Related Commands

Related commands are indicated below.
For details on the commands, refer to the Command Reference.

Operations | Operating commands
--- | ---
Multiple VLAN group settings | switchport multiple-vlan group
Settings for the name of multiple VLAN group | multiple-vlan group name
Show multiple VLANs | show vlan multiple-vlan

## 5. Examples of Command Execution

### 5.1. Multiple VLAN settings example 1

This configures multiple VLAN settings to achieve the following.

Hosts connected to ports 1–7 will connect to the Internet and other external lines, through the line to which port 8 is connected
Communications between hosts connected to ports 1–4 are blocked
Communications between hosts connected to ports 5–7 are permitted
Communications between hosts connected to ports 1–4 and ports 5–7 are blocked

The multiple VLAN group settings are as follows.

- port1.1: Associated with multiple VLAN group #1

- port1.2: Associated with multiple VLAN group #2

- port1.3: Associated with multiple VLAN group #3

- port1.4: Associated with multiple VLAN group #4

- port1.5: Associated with multiple VLAN group #5

- port1.6: Associated with multiple VLAN group #5

- port1.7: Associated with multiple VLAN group #5

- port1.8: Associated with multiple VLAN groups #1, #2, #3, #4, and #5

  1. This sets the name of multiple VLAN group #1 to “Network1”.

         Yamaha(config)# multiple-vlan group 1 name Network1 (1)

     1 | Settings for the name of multiple VLAN group #1

  2. This sets the name of multiple VLAN group #5 to “Network5”.

         Yamaha(config)# multiple-vlan group 5 name Network5 (1)

     1 | Settings for the name of multiple VLAN group #5

  3. Associates port1.1 through port1.4 with multiple VLAN groups #1 through #4 respectively.

         Yamaha(config)# interface port1.1 (1)
         Yamaha(config-if)# switchport multiple-vlan group 1 (2)
         Yamaha(config-if)# exit
         Yamaha(config)# interface port1.2 (3)
         Yamaha(config-if)# switchport multiple-vlan group 2 (4)
         Yamaha(config-if)# exit
         Yamaha(config)# interface port1.3 (5)
         Yamaha(config-if)# switchport multiple-vlan group 3 (6)
         Yamaha(config-if)# exit
         Yamaha(config)# interface port1.4 (7)
         Yamaha(config-if)# switchport multiple-vlan group 4 (8)
         Yamaha(config-if)# exit

     1 | Switch to interface mode
     2 | Configure multiple VLAN group
     3 | Switch to interface mode
     4 | Configure multiple VLAN group
     5 | Switch to interface mode
     6 | Configure multiple VLAN group
     7 | Switch to interface mode
     8 | Configure multiple VLAN group

  4. This associates port1.5 through port1.7 with multiple VLAN group #5.

         Yamaha(config)# interface port1.5-7 (1)
         Yamaha(config-if)# switchport multiple-vlan group 5 (2)
         Yamaha(config-if)# exit

     1 | Switch to interface mode
     2 | Specify multiple VLAN group

  5. This associates port1.8 with multiple VLAN groups #1, #2, #3, #4, #5.

         Yamaha(config)# interface port1.8 (1)
         Yamaha(config-if)# switchport multiple-vlan group 1-5 (2)
         Yamaha(config-if)# exit

     1 | Switch to interface mode
     2 | Specify multiple VLAN group

  6. This checks the multiple VLAN group settings.

         Yamaha>show vlan multiple-vlan
         GROUP ID  Name                            Member ports
         ======== ================================ ======================
         1        Network1                         port1.1 port1.8
         2        GROUP0002                        port1.2 port1.8
         3        GROUP0003                        port1.3 port1.8
         4        GROUP0004                        port1.4 port1.8
         5        Network5                         port1.5 port1.6
                                                   port1.7 port1.8

### 5.2. Multiple VLAN settings example 2

This configures multiple VLAN settings to achieve the following.

Hosts connected to ports 1 to 7 will connect to the Internet and other external lines, through the line to which port 8 is connected
Hosts connected to ports 1 to 7 are associated with VLAN #2 and assigned an IP address using the DHCP server functions
The IP address for VLAN #2 is 192.168.110.240/24 and the range of assigned addresses is from 192.168.110.2 to 192.168.110.191/24
Communication is blocked between hosts connected to ports 1 to 7

The multiple VLAN group settings are as follows.

- port1.1: Associated with multiple VLAN group #1

- port1.2: Associated with multiple VLAN group #2

- port1.3: Associated with multiple VLAN group #3

- port1.4: Associated with multiple VLAN group #4

- port1.5: Associated with multiple VLAN group #5

- port1.6: Associated with multiple VLAN group #6

- port1.7: Associated with multiple VLAN group #7

- port1.8: Associated with multiple VLAN groups #1, #2, #3, #4, #5, #6, and #7

  1. Create VLAN #2.

         Yamaha(config)# vlan database
         Yamaha(config-vlan)# vlan 2 (1)
         Yamaha(config-vlan)# exit
         Yamaha(config)#

     1 | Create VLAN !#2

  2. Assign ports port1.1 to port1.7 to VLAN #2.

         Yamaha(config)# interface port1.1-7
         Yamaha(config-if)# switchport access vlan 2
         Yamaha(config-if)#

         Yamaha(config)# interface vlan2
         Yamaha(config-if)# ip address 192.168.110.240/24

  3. Create the DHCP pool “pool_vlan2”.

         Yamaha(config)# dhcp pool pool_vlan2
         Yamaha(config-dhcp)(1)

     1 | Switch to the DHCP mode

  4. Specify the VLAN #2 network portion 192.168.110.0/24 in the DHCP pool.

         Yamaha(config-dhcp)# network 192.168.110.0/24

  5. Specify the address assignment range from 192.168.110.2 to 192.168.110.191 in the DHCP pool.

         Yamaha(config-dhcp)# range 192.168.110.2 192.168.110.191

  6. Specify the default gateway to be notified in DHCP option settings and specify the DNS server in the DHCP pool.

         Yamaha(config-dhcp)# default-router 192.168.110.240 (1)
         Yamaha(config-dhcp)# dns-server 192.168.110.1 (2)
         Yamaha(config-dhcp)# exit (3)

     1 | The default gateway address is 192.168.110.240 (its own address)
     2 | The DNS server address is 192.168.110.1
     3 | Exit the DHCP mode

  7. Activate the DHCP server functions for vlan2.

         Yamaha(config)# interface vlan2 (1)
         Yamaha(config-if)# dhcp-server enable (2)
         Yamaha(config-if)# exit (3)

     1 | Switch to interface mode
     2 | Enable the DHCP server functions for the interface
     3 | Exit the interface mode

  8. Activate the DHCP server functions for the entire system.

         Yamaha(config)# dhcp-server enable (1)

     1 | Enable the DHCP server functions for the entire system

  9. Associate port1.1 through port1.7 with multiple VLAN groups #1 through #7 respectively.

         Yamaha(config)# interface port1.1 (1)
         Yamaha(config-if)# switchport multiple-vlan group 1 (2)
         Yamaha(config-if)# exit
         Yamaha(config)# interface port1.2 (3)
         Yamaha(config-if)# switchport multiple-vlan group 2 (4)
         Yamaha(config-if)# exit
         Yamaha(config)# interface port1.3 (5)
         Yamaha(config-if)# switchport multiple-vlan group 3 (6)
         Yamaha(config-if)# exit
         Yamaha(config)# interface port1.4 (7)
         Yamaha(config-if)# switchport multiple-vlan group 4 (8)
         Yamaha(config-if)# exit
         Yamaha(config)# interface port1.5 (9)
         Yamaha(config-if)# switchport multiple-vlan group 5 (10)
         Yamaha(config-if)# exit
         Yamaha(config)# interface port1.6 (11)
         Yamaha(config-if)# switchport multiple-vlan group 6 (12)
         Yamaha(config-if)# exit
         Yamaha(config)# interface port1.7 (13)
         Yamaha(config-if)# switchport multiple-vlan group 7 (14)
         Yamaha(config-if)# exit

     1 | Switch to interface mode
     2 | Configure multiple VLAN group
     3 | Switch to interface mode
     4 | Configure multiple VLAN group
     5 | Switch to interface mode
     6 | Configure multiple VLAN group
     7 | Switch to interface mode
     8 | Configure multiple VLAN group
     9 | Switch to interface mode
     10 | Configure multiple VLAN group
     11 | Switch to interface mode
     12 | Configure multiple VLAN group
     13 | Switch to interface mode
     14 | Configure multiple VLAN group

  10. Associate port1.8 with multiple VLAN groups #1 to #7.

          Yamaha(config)# interface port1.8 (1)
          Yamaha(config-if)# switchport multiple-vlan group 1-7 (2)
          Yamaha(config-if)# exit

      1 | Switch to interface mode
      2 | Specify multiple VLAN group

  11. This checks the multiple VLAN group settings.

          Yamaha>show vlan multiple-vlan
          GROUP ID  Name                            Member ports
          ======== ================================ ======================
          1        GROUP0001                        port1.1 port1.8
          2        GROUP0002                        port1.2 port1.8
          3        GROUP0003                        port1.3 port1.8
          4        GROUP0004                        port1.4 port1.8
          5        GROUP0005                        port1.5 port1.8
          6        GROUP0006                        port1.6 port1.8
          7        GROUP0007                        port1.7 port1.8

## 6. Points of Caution

The points of caution regarding this function are as follows.

- The function cannot be used in conjunction with a private VLAN.

- The multiple VLAN group to associate with a link aggregation logical interface must be the same.

- A multiple VLAN group is only applicable to forwarding between ports. Voluntary packets will not be affected by the settings of a multiple VLAN group.

- Even if a multiple VLAN is configured, communication may not work correctly due to the following influences.

  - Block status of spanning tree

  - IGMP snooping/MLD snooping status

  - Blocked status of loop detection

- In inter-VLAN routing, multiple VLAN communication restrictions are applied only to packets routed by hardware processing.
  Restrictions do not apply to inter-VLAN routing through the CPU.

- When the cluster management function or wireless LAN controller function is used with Yamaha wireless access points, each access point must belong to the same multiple VLAN group.

## 7. Related Documentation

- VLAN

Search result
No more search results.
There are no topics that match your search query.