asymmetric vlan

Yes, you can set up VLANs to separate traffic on the 5548P switch.  

Virtual LAN Overview:

A VLAN is a switched network that is logically segmented on an organizational basis, by functions, project teams, or applications rather than on a physical or geographical basis. For example, all workstations and servers used by a particular workgroup team can be connected to the same VLAN, regardless of their physical connections to the network, or the fact that they might be intermingled with other teams. Reconfiguration of the network can be done through software rather than by physically unplugging and moving devices or wires.

A VLAN can be thought of as a Broadcast domain that exists within a defined set of switches. A VLAN consists of a number of end systems, either hosts or network equipment (such as bridges and routers), connected by a single bridging domain. The bridging domain is supported on various pieces of network equipment; for example, LAN switches that operate bridging protocols between them with a separate bridge group for each VLAN.

VLANs are created to provide the segmentation services traditionally provided by routers in LAN configurations. VLANs address scalability,security, and network management. Routers in VLAN topologies provide broadcast filtering, security, address summarization, and traffic flow management.

Page 457 in the User Guide starts the discussion about VLAN configuration and features.

support.dell.com/.../en_ug.zip

Hope this helps,

Let us know if you have further specific questions.

yes i know about vlans and i have read the manual but i can not understand by reading it (because it has not an examble of a shared ports vlan) if  i can define vlans with shared ports among them

d-link call this "asymmetric vlan" at some dell switches manual  i saw the phrase "port overlapping" ( i dont know if it is the same) but at the 5548P switch's manual i have not found the "port overlapping" concept

Are you wanting multiple VLANs on an interface? Or are you wanting a VLAN on multiple interfaces?

Can you reference the manual or device that you are seeing the "port overlapping" statement?

port 1 server untagged

port 2 printer untagged

these 2 ports to "see" all vlans so all can "see" the server and the printer but cannot "see" each other

something like this on page 36

www.dlink.com/.../DES_1210_2828P%20UserManualv200_EN_UK.pdf

In the PowerConnect series of switches that feature is not available on that level of communication.  In order to let VLANs communicate to certain devices (server, printer) then not be able to communicate with each other.  You would need to have routing enabled (allows communication between VLANs) and set up ACL's blocking certain VLANs from each other.  

This can get pretty complicated if you have no experience with setting up that type of configuration.  We can definitely provide assistance with the configuration.  Just letting you know it is not as simple as enabling a feature like the Dlink device.

Here are a couple articles discussing ACL configuration and function.

www.dell.com/.../pwcnt_IP_ACLs.pdf

www.dell.com/.../app_note_3.pdf

Hope this helps,

Keep us updated if you can.

so i could leave everything on one vlan and then make acl rules to seperate traffic?is it the same as vlan partitioning?what is the diffrenece between acl and vlan?so why do we need vlans if we can make the same job with acl?

1. so i could leave everything on one vlan and then make acl rules to seperate traffic?

1.  YES and NO:  No, All devices in the same VLAN (subnet, Virtual LAN) will communicate with each other. Yes, you can set ACLs to block a certain IP address from reaching another specific IP address.

2. is it the same as vlan partitioning?

2.  A VLAN is a partitioning of a physical switch/router.

3.  what is the diffrenece between acl and vlan?

3.  Simply separate/segment a network.  ACL’s are used to micro manage communication on a network allowing/denying certain device/networks or protocols from reaching a device/network.

4.  so why do we need vlans if we can make the same job with acl?

4.  Without VLANs there is no communication at all.  Every switch has a default VLAN 1.  You have the option of setting up more VLANs to separate/segment traffic.  If you are wanting all devices to communicate with each other.   Then you would not need to add further VLANs.  

Some bigger environments like to use VLANs to put the Accounting department all on one VLAN,  HR on one VLAN that way someone that is not authorized cannot get a record of Payroll on someone.

The best practice for setting up communication is with VLANs and enabling routing to allow communication between VLANs then once everyone can talk to each other you would block a device from another device with an ACL configuration on the switch.

"enabling routing to allow communication between VLANs" that suggests that the switch is L3 and not L2 or L2+   ?

are you sure that with the port on general mode i cant share a device to different vlans?

The 55xx switch is a Layer 2+ switch. It has limited routing features.  You can set up static routes.  No VLAN routing or dynamic routing protocols.

Routing options are discussed on page 693 of the User Guide

support.dell.com/.../en_ug.zip

A trunk and or general switchport will allow multiple vlans to communicate to another device with similar configuration options.

The switchport configuration options start on page 500 of the User Guide