Index: en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml =================================================================== --- en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml +++ en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml @@ -5225,8 +5225,9 @@ VLANs are a way of virtually dividing up - a network into many different subnetworks. Each will have its - own broadcast domain and be isolated from the rest of the + a network into many different subnetworks, also referred + to as segmenting. Each segment will have its + own broadcast domain and be isolated from other VLANs. On &os;, VLANs must be supported by the @@ -5239,7 +5240,7 @@ To configure VLANs at run time, with a NIC of em0 and a - VLAN tag of 5. The + VLAN tag of 5 the command would look like this: &prompt.root; ifconfig em0.5 create vlan 5 vlandev em0 inet 192.168.20.20/24 @@ -5266,5 +5267,45 @@ vlans_em0 field and adding an additional line configuring the network on that VLAN tag's interface. + + It is useful to assign a symbolic name to an interface so + that when the associated hardware is changed, only a few + configuration variables need to be updated. + For example, you might want to run security cameras over VLAN 1 + on em0. + Later, if you replace the em0 card with a + card that uses the &man.ixgb.4; driver you will not have to + change references to em0.1 to + ixgb0.1. Assigning symbolic names to + interfaces can also be useful to help clarify which port is + associated with built-in ethernet interfaces. For example, I + named interfaces video and audio to associate the ports located + next to the video and audio connectors. Assigning symbolic + names to interfaces can also ease managing a firewall + configuration. + + To configure VLAN + 5, on the + NIC em0, assign the + interface name cameras, and assign the + interface an IP address of 192.168.20.20 with a + 24-bit + prefix, use this command: + + &prompt.root; ifconfig em0.5 create vlan 5 vlandev em0 name cameras inet 192.168.20.20/24 + + To do almost the same thing, but use an interfaces that has + been named video use this command: + + &prompt.root; ifconfig video.5 create vlan 5 vlandev video name cameras inet 192.168.20.20/24 + + To do the last confguration at boot time, add the following + lines to /etc/rc.conf: + + vlans_video="camera" +create_args_camera="vlan 5" +ifconfig_camera="inet 192.168.20.20/24" +