Introduction to MUX VLAN
Background
The Multiple VXLAN (MUX VLAN) function is used to control network resources based on VLANs.
For example, both enterprise employees and customers can access the servers on an enterprise network. The enterprise allows employees to communicate with each other but prevents customers from communicating with each other.
To allow all users to access the enterprise servers, inter-VLAN communication must be configured. If there are a large number of users in an enterprise, VLANs need to be assigned to the users that the enterprise wishes to restrict communication. This wastes VLAN IDs and adds significant workload to network configuration and maintenance.
MUX VLAN provides Layer 2 isolation to allow enterprise employees to communicate and isolate customers.
Basic Concepts
A MUX VLAN consists of principal VLANs and subordinate VLANs; subordinate VLANs are classified into separate VLANs and group VLANs. See Table 7-1 for a description of these roles.
MUX VLAN |
VLAN Type |
Associated Interface |
Access Authority |
|---|---|---|---|
Principal VLAN |
- |
Principal interface |
A principal interface can communicate with all interfaces in a MUX VLAN. |
Subordinate VLAN |
Separate VLAN |
Separate interface |
A separate interface can communicate only with a principal interface and is isolated from other types of interfaces. Each separate VLAN must be bound to a principal VLAN. |
Group VLAN |
Group interface |
A group interface can communicate with a principal interface and the other interfaces in the same group, but cannot communicate with interfaces in other groups or a separate interface. Each group VLAN must be bound to a principal VLAN. |
Communication in the MUX VLAN
As shown in Figure 7-1, the principal port connects to the enterprise server; the separate port connects to enterprise customers; the group port connects to enterprise employees. Accordingly, both enterprise customers and employees can access the enterprise server, enterprise employees can communicate with each other, enterprise customers cannot communicate with each other, and enterprise customers and employees cannot communicate with each other.
