Index: en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml
===================================================================
--- en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml
+++ en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml
@@ -5225,8 +5225,9 @@
VLANs are a way of virtually dividing up
- a network into many different subnetworks. Each will have its
- own broadcast domain and be isolated from the rest of the
+ a network into many different subnetworks, also referred
+ to as segmenting. Each segment will have its
+ own broadcast domain and be isolated from other
VLANs.
On &os;, VLANs must be supported by the
@@ -5239,7 +5240,7 @@
To configure VLANs at run time, with a
NIC of em0 and a
- VLAN tag of 5. The
+ VLAN tag of 5 the
command would look like this:
&prompt.root; ifconfig em0.5 create vlan 5 vlandev em0 inet 192.168.20.20/24
@@ -5266,5 +5267,45 @@
vlans_em0
field and adding an additional line configuring the network on
that VLAN tag's interface.
+
+ It is useful to assign a symbolic name to an interface so
+ that when the associated hardware is changed, only a few
+ configuration variables need to be updated.
+ For example, you might want to run security cameras over VLAN 1
+ on em0.
+ Later, if you replace the em0 card with a
+ card that uses the &man.ixgb.4; driver you will not have to
+ change references to em0.1 to
+ ixgb0.1. Assigning symbolic names to
+ interfaces can also be useful to help clarify which port is
+ associated with built-in ethernet interfaces. For example, I
+ named interfaces video and audio to associate the ports located
+ next to the video and audio connectors. Assigning symbolic
+ names to interfaces can also ease managing a firewall
+ configuration.
+
+ To configure VLAN
+ 5, on the
+ NIC em0, assign the
+ interface name cameras, and assign the
+ interface an IP address of 192.168.20.20 with a
+ 24-bit
+ prefix, use this command:
+
+ &prompt.root; ifconfig em0.5 create vlan 5 vlandev em0 name cameras inet 192.168.20.20/24
+
+ To do almost the same thing, but use an interfaces that has
+ been named video use this command:
+
+ &prompt.root; ifconfig video.5 create vlan 5 vlandev video name cameras inet 192.168.20.20/24
+
+ To do the last confguration at boot time, add the following
+ lines to /etc/rc.conf:
+
+ vlans_video="camera"
+create_args_camera="vlan 5"
+ifconfig_camera="inet 192.168.20.20/24"
+