VLAN Tagged VLAN Untagged VLAN Replace Network TAP for Network Traffic Monitor

1.Overviews

When discussing VLANs (Virtual Local Area Networks) and their relation to network monitoring, particularly in the context of using a Network TAP (Test Access Point), it’s important to understand the concepts of tagged and untagged VLANs. Here’s an overview of how these elements interact and how VLAN tagging can replace or enhance traditional network TAPs for traffic monitoring.

VLAN Basics

• VLAN: A VLAN allows network administrators to create separate networks within a single physical network, enhancing security and improving traffic management.

• Tagged VLAN: Frames in a tagged VLAN include a VLAN tag in their Ethernet frame header, indicating the VLAN to which the frame belongs. This is typically used in trunk ports that carry traffic from multiple VLANs.

• Untagged VLAN: Frames in an untagged VLAN do not include a VLAN tag. This is common for access ports, which connect end devices to a single VLAN.

Replacing Network TAPs with VLANs for Traffic Monitoring

Advantages of Using VLANs Over Traditional TAPs:

1. Cost-Effective: Utilizing VLANs can reduce the need for physical TAP devices, lowering hardware costs and simplifying the network infrastructure.

2. Flexibility: VLANs can be easily reconfigured through software, allowing for dynamic changes to monitoring setups without physical alterations.

3. Scalability: As networks grow, VLANs can be expanded by simply reconfiguring switches rather than adding new TAPs, making management easier.

4. Remote Monitoring: VLANs support remote monitoring capabilities, allowing for centralized management of traffic without needing local physical access.

5. Integration with Existing Infrastructure: VLANs can be integrated into existing network setups without significant changes, simplifying deployment.

Considerations for Using VLANs for Monitoring:

• Traffic Visibility: Ensure that the monitoring tools can handle VLAN tags correctly. Some tools might need configuration to recognize and filter tagged traffic.

• Potential for Data Loss: Unlike TAPs, which create a duplicate of the traffic, VLAN monitoring can lead to missing packets if the monitoring configuration is not set up correctly.

• Performance Impact: Overloading a switch with too many VLANs for monitoring could impact performance. Proper design is essential.

• Security: VLANs can introduce security risks if not configured properly. Ensure that sensitive data is adequately protected.

• NT-VPP-4860G traffic visualization processor supports vlan tagging, replacement of raw data packets and removal of vlan labels, and can implement traffic output strategy according to user configuration

2.Intelligent Traffic Processing Abilities​

VLAN Tagged

Supported the matching of any key field in the first 128 bytes of a packet. The user can customize the offset value and key field length and content, and determine the traffic output policy according to the user configuration.

VLAN Untagged

Supported the matching of any key field in the first 128 bytes of a packet. The user can customize the offset value and key field length and content, and determine the traffic output policy according to the user configuration.

VLAN Replace

Supported the matching of any key field in the first 128 bytes of a packet. The user can customize the offset value and key field length and content, and determine the traffic output policy according to the user configuration.

NetTAP® Visibility Platform

Supported NetTAP® Matrix-SDN Visual Control Platform Access

1+1 Redundant Power System(RPS)

Supported 1+1 Dual Redundant Power System

NT-VPP-4860G Network TAP NPB.pdf

3.Typical Application Structures

• Data VLAN Tagged Application(as following)

4.Specifications

5.Order Information

NT-VPP-4860G-SOFT-PEX       NetTAP^® Visual Control Processor Extend Ports Software