PVE scernario

NewsGroups | Search | Tools

User Password

Lost Password?

comp.dcom.lans.ethernet

get this group's latest topics as an RSS feed

add this group's latest topics to your My MSN content

add this group's latest topics to your My Yahoo content

add this group's latest topics to your Google content

Yahoo!

Google

Windows Live

del.icio.us digg

digg

Netscape

Subject

Author

Date

PVE scernario

Geir Holmavatn

08-16-2006

anoop

Geir Holmavatn

anoop

Geir Holmavatn

anoop

Geir Holmavatn

anoop

Posted by Geir Holmavatn on August 16, 2006, 9:31 am

If you were Registered and logged in, you could reply and use other advanced thread options

Hi,

A time ago Marco in this ng suggested me to use the Linksys SRW2016 PVE
feature to be able to enable/disable internet access in selected
classrooms in a school. The Linksys manual did not correspond with the
actual web interface for the PVE, but now I think I have figured out how
to set up the PVE stuff. If possible I just want to have confirmed that
this solution (how I think it should be set up) is going to work.

A simplified sketch of the setup can be found here:

http://www.kuntigi.net/download/Classrooms.jpg

I plan to divide the switch into two PVEs, first for port 1-7 with port
8 as uplink. Port 8 is connected to the domain controller etc and this
is also the port which should be used to administer the switch.

The second PVE (blue connections) is for port 9-15 with port 16 as
uplink. The latter is connected to the firewall. This is for
distributing the internet connection. In each classroom the teacher
should be able to connect/disconnect the blue cable to the classroom
switch (internet connection for his classroom) without affecting the
other classrooms' internet access.

Will this work, and if yes is there any side effects?

How about administering the switch, this is normally assigned to VLAN1
how will the be affected using PVE...?

If this will not work, do you have other suggestions to solve this not
needing huge investments ;-) ??

Thanks for any comment or feedback on this

regards

geir

Network Magic 20% Off NMEASY coupon code spring banner 468x60

Posted by anoop on August 16, 2006, 4:03 pm

If you were Registered and logged in, you could reply and use other advanced thread options

Geir Holmavatn wrote:

> http://www.kuntigi.net/download/Classrooms.jpg

> Will this work, and if yes is there any side effects?

I don't understand the PVE feature too well, but based on
your picture, how does a frame decide whether it goes out
on the black port or the blue port? I assume that the frames
are all classified as being on the "black" VLAN so they
would never be able to make it out on the "blue" ports.

Post some info on the VLAN configuration (the VLANs
and their port memberships, tagged/untagged for each
port, etc.) and things may become a bit clearer.

Anoop

Posted by Geir Holmavatn on August 16, 2006, 4:16 pm

If you were Registered and logged in, you could reply and use other advanced thread options

anoop wrote:

> Geir Holmavatn wrote:

>> http://www.kuntigi.net/download/Classrooms.jpg

>> Will this work, and if yes is there any side effects?

> I don't understand the PVE feature too well, but based on

> your picture, how does a frame decide whether it goes out

> on the black port or the blue port? I assume that the frames

> are all classified as being on the "black" VLAN so they

> would never be able to make it out on the "blue" ports.

> Post some info on the VLAN configuration (the VLANs

> and their port memberships, tagged/untagged for each

> port, etc.) and things may become a bit clearer.

Hi Anoop,

I'm a complete newbie with regard of VLANs, but in the earlier thread
'VLAN question' above Marco gave me a tip to use the Private Virtual
Edge feature. In my case this should connect port 1-7 to port 8 but
isolate port 1-7 from each other. Same issue with ports 9-15 and 16.

Hence I thought that each classroom will get (and stay) connected to the
main domain controller through the uplink port 8. And the internet are
feed through ports 9-15's uplink port 16. Whether or not each classroom
are connected to the internet depends on whether the blue lead is
connected to the classroom switch or not.

So, - I haven't manually programmed any VLANs here apart from giving the
two port ranges their respective uplink port therough the PVE feature.

I'm a bit hesitating to test this because I'm not sure what happens to
the switch's webmin access. I don't want to lock myself out and the box
doesn't have a reset button :-|

Thanks again for comments (sorry for the typos in the OP)

regards Geir

Posted by anoop on August 16, 2006, 4:33 pm

If you were Registered and logged in, you could reply and use other advanced thread options

Geir Holmavatn wrote:

> I'm a complete newbie with regard of VLANs, but in the earlier thread

> 'VLAN question' above Marco gave me a tip to use the Private Virtual

> Edge feature. In my case this should connect port 1-7 to port 8 but

> isolate port 1-7 from each other. Same issue with ports 9-15 and 16.

Are you aware of any information on PVE on the web? I couldn't
find any and find it hard to comment on your design without
knowing what the PVE feature does.

By the way, since this feature is Cisco/Linksys-specific, you might
be able to get better help by posting to comp.dcom.sys.cisco.

Anoop

Posted by Geir Holmavatn on August 16, 2006, 5:35 pm

If you were Registered and logged in, you could reply and use other advanced thread options

anoop wrote:

> Geir Holmavatn wrote:

>> I'm a complete newbie with regard of VLANs, but in the earlier thread

>> 'VLAN question' above Marco gave me a tip to use the Private Virtual

>> Edge feature. In my case this should connect port 1-7 to port 8 but

>> isolate port 1-7 from each other. Same issue with ports 9-15 and 16.

> Are you aware of any information on PVE on the web? I couldn't

> find any and find it hard to comment on your design without

> knowing what the PVE feature does.

> By the way, since this feature is Cisco/Linksys-specific, you might

> be able to get better help by posting to comp.dcom.sys.cisco.

I thought that posting linksys stuff in a cisco group would be like
cursing in the chorch - despite that linksys is a cisco subsidary...

If I get flamed I'll tell them that you sent me ;-)

Thanks for your comments, Anoop

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com