
Chapter 3
3-10
Figure 3.6 Equivalent solutions using untagged and tagged interfaces
The configuration on the left shows a BIG-IP unit with three internal
interfaces, each a separate, untagged interface. This is a typical solution for
supporting three separate customer sites. In this scenario, each interface can
only accept traffic from its own VLAN.
Conversely, the configuration on the right shows a BIG-IP with one internal
interface and an external switch. The switch places the internal interface on
three separate VLANs. The interface is configured on each VLAN as a
tagged interface. In this way, the single interface becomes a tagged member
of all three VLANs, and accepts traffic from all three. The configuration on
the right is the functional equivalent of the configuration on the left.
Not only can you add a single, tagged interface to multiple VLANs, as
shown in the above example, you can also add multiple tagged interfaces to
a single VLAN.
Configuration procedures
You configure tag-based access to VLANs using either the Configuration
utility or the bigpipe vlan command. You can configure tag-based access
either when you create a VLAN and add member interfaces to it, or by
modifying the properties of an existing VLAN. In the latter case, you simply
change the status of one or more member interfaces from untagged to
tagged.
Comentarios a estos manuales