Managing multiple virtual network memberships

摘要

To facilitate management and configuration of VLAN memberships associated with applications or network protocols, a network device receives a packet from a wireless station which is a member of a virtual local area network (VLAN). The network device determines whether the packet is associated with a predefined application or network protocol. If so, the network device delivers the received packet to a dedicated VLAN which is accessible only to network devices associated with the predefined application or network protocol, regardless of destination address specified within the packet. If not, the network device delivers the received packet to an address or a group of addresses specified in a header of the received packet. In some embodiments, the VLAN is divided from a VLAN pool, and the dedicated VLAN corresponds to an address space that is outside the address space of the VLAN pool.

主权项

1. A method comprising:
receiving, at a network device, a first packet from a first wireless station which is a member of a first virtual local area network (VLAN) and a second packet from a second wireless station which is a member of a second VLAN; determining, by the network device, whether, the first packet is associated with a first predefined application or network protocol and the second received packet is associated with a second predefined application or network protocol; delivering, by the network device, the first packet to a first dedicated VLAN which is accessible only to network devices associated with the first predefined application or network protocol and the second received packet to a second dedicated VLAN which is accessible only to network devices associated with the second predefined application or network protocol; wherein the first and second VLANs are associated with a VLAN pool, the VLAN pool is a group of VLANs each of which is divided from a common address space; and wherein each of the first and second dedicated VLANs specific to an application or network protocol corresponds to a distinct address space that is outside an address space of the VLAN pool.