VLANs, Trunks & QinQ
VLAN(Virtual Local Area Network)虛擬區域網路,用於在交換器上建立隔離的網路區段。
Physical Segment

Frame Tagging

VLANs
VLAN 的主要功能:
- Create separate L2 network segments
- Isolated traffic isolation
- Different networks (e.g., AWS Direct Connect VPCs)
- Separate Broadcast Domains

VLAN 特性
| 特性 | 說明 |
|---|---|
| Traffic Isolation | 不同 VLAN 間的流量完全隔離 |
| Broadcast Domain | 每個 VLAN 是獨立的廣播域 |
| Security | 提供網路區段的安全隔離 |
| Flexibility | 無需實體佈線即可重新配置網路 |
VLANs 概念
- Divides Switch Ports into isolated groups
- Divides Switches into multiple “mini-switches”
- Switches do all three actions within each VLAN

Multiple Switches
跨交換器的 VLAN 配置:
