
Version 5.6 371 November 2008
SIP User's Manual 8. Networking Capabilities
Traffic type tagging can be used to implement Layer 2 VLAN security. By discriminating
traffic into separate and independent domains, the information is preserved within the
VLAN. Incoming packets received from an incorrect VLAN are discarded.
The traffic tagging mechanism is as follows:
Outgoing packets (from the device to the switch): All outgoing packets are tagged,
each according to its interface (Control, Media or OAMP). If the device’s native VLAN
ID is identical to one of the other IDs (usually to the OAMP's VLAN ID), this ID (e.g.,
OAMP) is set to zero on outgoing packets (VlanSendNonTaggedOnNative set to 0).
This method is called Priority Tagging (p tag without Q tag). If the parameter
VlanSendNonTaggedOnNative is set to 1, the device sends regular packets (with no
VLAN tag).
Incoming packets (from the switch to the device): The switch sends all packets
intended for the device (according to the switch’s configuration) to the device without
altering them. For packets whose VLAN ID is identical to the switch’s PVID, the switch
removes the tag and sends a packet. The device accepts only packets that have a
VLAN ID identical to one of its interfaces (Control, Media or OAMP). Packets with a
VLAN ID that is 0 or untagged packets are accepted only if the device’s native VLAN
ID is identical to the VLAN ID of one of its interfaces. In this case, the packets are sent
to the relevant interface. All other packets are rejected.
Media traffic type is assigned ‘Premium media’ CoS, Management traffic type is assigned
‘Bronze’ CoS, and Control traffic type is assigned ‘Premium control’ CoS. For example,
RTP/RTCP traffic is assigned the Media VLAN ID and ‘Premium media’ CoS, whereas Web
traffic is assigned the Management VLAN ID and ‘Bronze’ CoS. Each of these parameters
can be configured with a 802.1p/Q value: traffic type to VLAN ID, and CoS to 802.1p
priority.
Figure 8-2: Multiple Network Interfaces and VLANs
Comentarios a estos manuales