FS S3900 SERIES SWITCHES

Overview

The S3900 series switches consist of three models: S3900-24T4S, S3900-24F4S, S3900-48T4S, which are fully managed stackable Gigabit switches, equipped with Broadcom chips, supporting 10G SFP+ uplinks, designed for SMB, campus and enterprise networks.

S3900-24T4S S3900-24F4S S3900-48T4S

Product Guideline

Product Guideline

Case Study

Download

FAQ

Basic Information
Overview
Test Report
EOM, EOFS and EOS Date
Supported Module & Cable
Configuration Guide
Switch Stack
Voice VLAN
STP Configuration
Interface-based VLAN
IP Subnet-based VLAN
Protocol-based VLAN
Traffic Segmentation
Log in Guide
Port Mirroring
MAC Address-based VLAN
LACP
SNMP
DHCP Snooping

Interface-based VLAN Configuration on FS S3900 Series Switches

Posted on By FS.COM

VLAN (Virtual Local Area Network) is a technology that divides a physical LAN into multiple broadcast domains to control the broadcast storm, enhance LAN security and simplify network management. The hosts in the VLAN can communicate with each other, but different VLANs cannot communicate with each other. Consequently, broadcast packets are confined to within a single VLAN.

VLAN can be divided into interface-based VLAN, MAC address-based VLAN, IP subnet-based VLAN, protocol-based VLAN, and policy-based VLAN. This article will focus on the interface-based VLAN configuration on FS S3900 series switches which are designed for the campus network, SMB, and home network.

Interface-based VLAN Application on FS S3900 Series Switches

The following figure shows a typical VLAN networking application of S3900-24F4S managed switch. At the first floor, there are two departments—IT and sales department. The company needs that different departments cannot communicate with each other, only the hosts in the same department can access each other. Therefore, different VLANs are configured on the S3900-24F4S switch to isolate the two departments.

1. Real Case.jpg

Hardware Connection Guide for Interface-based VLAN Configuration of S3900 Series Switches

Based on the connected object type and the way the interface process frames, the switch ports in the interface-based VLAN can be divided into the following types:

Access Port

The access port can only receive and send untagged frames because it cannot identify VLAN tags. But it can add only a unique VLAN tag to untagged frames. Usually, the access interface connects to a user terminal like user host or server.

2. Access Interface Application.jpg

Trunk Port

A trunk port can allow multiple VLANs frames to get through with tags, but it can only allow frames of one VLAN to be sent out of the trunk interface without tags (that is to say: removing the tags). Therefore, the trunk interface often connects a switch, router, AP, or voice terminal that allows tagged and untagged frames to pass at the same time.

3. Trunk Interface Application.jpg

Hybrid Port

Hybrid port allows tagged frames from multiple VLANs to pass. Frames sent out from a hybrid interface are tagged or untagged according to the VLAN configuration. And hybrid port can connect with terminal devices that can receive and send tagged and untagged frames.

4. Hybrid Interface Application.jpg

Notes:


  • Hosts in the same VLAN can communicate with each other while different VLANs can not (you must configure the trunk or hybrid port for the switch or router).

  • There is a default VLAN in every port. Generally, the default VLAN of all ports is VLAN 1, but users can configure it according to their requirements.

  • The trunk and hybrid port can be used universally in many application scenarios, but in some scenes, you must use the hybrid ports. For example, if you want to use a port to connect a network segment of different VLAN, you have to apply the hybrid interface due to that an interface needs to add tags to multiple untagged packets.

  • Because an access port can join only one VLAN, its default VLAN is the VLAN to which it belongs and cannot be configured. On the contrary, you can configure a default VLAN for the trunk and hybrid port due to that they can join multiple VLANs.

  • The following configuration is done based on the three pictures mentioned above.

Interface-based VLAN Configuration Roadmap of S3900 Series Switches

The interface-based VLAN configuration of S3900 series switches can be realized via CLI and web GUI interface. And the configuration process is suitable for all modes of S3900 series switches. Here take S3900-24F4S as an example.

The configuration roadmaps are here:


  • Connect the PC to the switch and login to the CLI interface through the console port, Telnet or SSH.

  • Create the VLAN and name the ID for it.

  • Configure the switch port mode and add it to the corresponding VLAN.

S3900 Series Switches Interface-based VLAN Configuration via CLI

Configure VLAN for the Access Interface

1. Login to the S3900-24F4S switch and enter into the CLI interface.

2. Create VLAN 10 and VLAN 20 in the S3900-24F4S switch 1.

S3900-24F4S-1#configure terminal
S3900-24F4S-1(config)#vlan database
S3900-24F4S-1(config-vlan)#vlan 10,20

3. Configure the 1/1 port as the access interface and add it into VLAN 10

S3900-24F4S-1(config)#interface ethernet 1/1
S3900-24F4S-1(config-if)#switchport mode access
S3900-24F4S-1(config-if)#switchport access vlan 10

4. Configure the 1/2 port as the access interface and add it into VLAN 20

S3900-24F4S-1(config)#interface ethernet 1/2
S3900-24F4S-1(config-if)#switchport mode access
S3900-24F4S-1(config-if)#switchport access vlan 20

5. Configure the 1/3 port as the access interface and add it into VLAN 10

S3900-24F4S-1(config)#interface ethernet 1/3
S3900-24F4S-1(config-if)#switchport mode access
S3900-24F4S-1(config-if)#switchport access vlan 10

6. Configure the 1/4 port as the access interface and add it into VLAN 20

S3900-24F4S-1(config)#interface ethernet 1/4
S3900-24F4S-1(config-if)#switchport mode access
S3900-24F4S-1(config-if)#switchport access vlan 20

7. After the configuration is successful, PC1 and PC3 are in the same VLAN 10 and can communicate with each other. PC2 and PC4 can communicate with each other and cannot communicate with PC1 and PC3.

Configure VLAN for the Trunk Interface

1. Login to the S3900-24F4S switch and enter into the CLI interface.

2. Create VLAN 10 and VLAN 20 in the S3900-24F4S switch 1.

S3900-24F4S-1#configure terminal
S3900-24F4S-1(config)#vlan database
S3900-24F4S-1(config-vlan)#vlan 10,20

3. Configure the 1/1 port as the access interface and add it into VLAN 10.

S3900-24F4S-1(config)#interface ethernet 1/1
S3900-24F4S-1(config-if)#switchport mode access
S3900-24F4S-1(config-if)#switchport access vlan 10

4. Configure the 1/2 port as the access interface and add it into VLAN 20.

S3900-24F4S-1(config)#interface ethernet 1/2
S3900-24F4S-1(config-if)#switchport mode access
S3900-24F4S-1(config-if)#switchport access vlan 20

5. Configure the 1/3 port as the trunk interface and allow all VLANs to get through.

S3900-24F4S-1(config)#interface ethernet 1/3
S3900-24F4S-1(config-if)#switchport mode trunk
S3900-24F4S-1(config-if)#switchport trunk allowed vlan all

6. Do the same configuration on S3900-24F4S switch 2 like the switch 1 above, and then connect the two trunk ports together.

7. After the configuration is successful, PC1 and PC3 can communicate with each other and PC2 and PC4 can also communicate with each other.

Configure VLAN for the Hybrid Interface

1. Login to the S3900-24F4S switch and enter into the CLI interface.

2. Configure VLAN 10, VLAN 20, and VLAN 30 on the S3900-24F4S switch 1.

S3900-24F4S-1#configure terminal
S3900-24F4S-1(config)#vlan database
S3900-24F4S-1(config-vlan)#vlan 10,20,30

3. Configure the 1/1 port as the hybrid interface, default VLAN as 10 and allow untagged VLAN 10, 30 to get through.

S3900-24F4S-1(config)#interface ethernet 1/1
S3900-24F4S-1(config-if)#switchport mode hybrid
S3900-24F4S-1(config-if)#switchport hybrid pvid 10
S3900-24F4S-1(config-if)#switchport hybrid allowed vlan add 10,30 untagged

4. Configure the 1/2 port as the hybrid interface, default VLAN as 20 and allow untagged VLAN 20, 30 to get through.

S3900-24F4S-1(config)#interface ethernet 1/2
S3900-24F4S-1(config-if)#switchport mode hybrid
S3900-24F4S-1(config-if)#switchport hybrid pvid 20
S3900-24F4S-1(config-if)#switchport hybrid allowed vlan add 20,30 untagged

5. Configure the 1/3 port as the hybrid interface and allow tagged VLAN 10, 20, 30 to get through.

S3900-24F4S-1(config)#interface ethernet 1/3
S3900-24F4S-1(config-if)#switchport mode hybrid
S3900-24F4S-1(config-if)#switchport hybrid allowed vlan add 10,20,30 tagged

6. Create VLAN 10, 20, 30 in the S3900-24F4S switch 2.

S3900-24F4S-2#configure terminal
S3900-24F4S-2(config)#vlan database
S3900-24F4S-2(config-vlan)#vlan 10,20,30

7. Configure the 1/1 port as the hybrid interface, default VLAN as 30 and allow untagged VLAN 10, 20, 30 to get through.

S3900-24F4S-2(config)#interface ethernet 1/1
S3900-24F4S-2(config-if)#switchport mode hybrid
S3900-24F4S-2(config-if)#switchport hybrid pvid 30
S3900-24F4S-2(config-if)#switchport hybrid allowed vlan add 10,20,30 untagged

8. Configure the 1/3 port as the hybrid interface and allow tagged VLAN 10, 20, 30 to get through.

S3900-24F4S-2(config)#interface ethernet 1/3
S3900-24F4S-2(config-if)#switchport mode hybrid
S3900-24F4S-2(config-if)#switchport hybrid allowed vlan add 10,20,30 tagged

9. After the configuration is successful, PC1 and PC2 can communicate with PC3 and PC1 cannot communicate with PC2.

S3900 Series Switches Interface-based VLAN Configuration Via Web GUI

1. Open the browser and enter the Web GUI through IP address 10.32.96.153 (the IP address is set when you enable the web service in CLI interface).

2. Login the Web GUI using the default account and password (admin/admin).

3. Switch Management > VLAN > Static VLAN >VLAN Management > New, create new VLAN on the switch.

5. Web GUI First Step.png

4. Enter 10, 20, 30 in the "VLAN ID" and click "Apply" in sequence, then close the page.

6. Web GUI Second Step.png

5. Configure the port 1 as the access interface in the "Member Setting" and add it to the VLAN 10.

Enter 1 in "Port Range", choose "Access" port mode and input 10 on the "VLAN ID", then click "Apply".

7. Web GUI Third Step.png

6. Configure the port 2 as the trunk interface and allow VLAN 10, 20, 30 to get through.

Enter 2 in "Port Range", choose 1Q "Trunk" port mode, input 10, 20, 30 on "VLAN ID" and click "Apply" separately.

8. Web GUI Fourth Step.png

7. Configure the port 3 as the hybrid interface and allow tagged VLAN 10, 20, 30 to get through.

Enter 3 in "Port Range", choose "Hybrid" mode, input 10, 20, 30 on "VLAN ID" and click "Apply" separately.

9. Web GUI Fifth Step.png

8. After the configuration is finished, you can view the port details in corresponding VLANs in the "Member List" above.


Related Articles:

How to Log in to FS S3900 Series Gigabit Managed Switches
Traffic Segmentation Configuration on FS S3900 Series Switches

Name
All Type
Date
File