VLAN Tagged VLAN Untagged VLAN Replace Network TAP for Network Traffic Monitor

1.Overviews

When discussing VLANs (Virtual Local Area Networks) and their relation to network monitoring, particularly in the context of using a Network TAP (Test Access Point), it’s important to understand the concepts of tagged and untagged VLANs. Here’s an overview of how these elements interact and how VLAN tagging can replace or enhance traditional network TAPs for traffic monitoring.

VLAN Basics

• VLAN: A VLAN allows network administrators to create separate networks within a single physical network, enhancing security and improving traffic management.

• Tagged VLAN: Frames in a tagged VLAN include a VLAN tag in their Ethernet frame header, indicating the VLAN to which the frame belongs. This is typically used in trunk ports that carry traffic from multiple VLANs.

• Untagged VLAN: Frames in an untagged VLAN do not include a VLAN tag. This is common for access ports, which connect end devices to a single VLAN.

Replacing Network TAPs with VLANs for Traffic Monitoring

Advantages of Using VLANs Over Traditional TAPs:

1. Cost-Effective: Utilizing VLANs can reduce the need for physical TAP devices, lowering hardware costs and simplifying the network infrastructure.

2. Flexibility: VLANs can be easily reconfigured through software, allowing for dynamic changes to monitoring setups without physical alterations.

3. Scalability: As networks grow, VLANs can be expanded by simply reconfiguring switches rather than adding new TAPs, making management easier.

4. Remote Monitoring: VLANs support remote monitoring capabilities, allowing for centralized management of traffic without needing local physical access.

5. Integration with Existing Infrastructure: VLANs can be integrated into existing network setups without significant changes, simplifying deployment.

Considerations for Using VLANs for Monitoring:

• Traffic Visibility: Ensure that the monitoring tools can handle VLAN tags correctly. Some tools might need configuration to recognize and filter tagged traffic.

• Potential for Data Loss: Unlike TAPs, which create a duplicate of the traffic, VLAN monitoring can lead to missing packets if the monitoring configuration is not set up correctly.

• Performance Impact: Overloading a switch with too many VLANs for monitoring could impact performance. Proper design is essential.

• Security: VLANs can introduce security risks if not configured properly. Ensure that sensitive data is adequately protected.

• NT-VPP-4860G traffic visualization processor supports vlan tagging, replacement of raw data packets and removal of vlan labels, and can implement traffic output strategy according to user configuration

2.Intelligent Traffic Processing Abilities​

VLAN Tagged

Supported the matching of any key field in the first 128 bytes of a packet. The user can customize the offset value and key field length and content, and determine the traffic output policy according to the user configuration.

VLAN Untagged

Supported the matching of any key field in the first 128 bytes of a packet. The user can customize the offset value and key field length and content, and determine the traffic output policy according to the user configuration.

VLAN Replace

Supported the matching of any key field in the first 128 bytes of a packet. The user can customize the offset value and key field length and content, and determine the traffic output policy according to the user configuration.

NetTAP® Visibility Platform

Supported NetTAP® Matrix-SDN Visual Control Platform Access

1+1 Redundant Power System(RPS)

Supported 1+1 Dual Redundant Power System

NT-VPP-4860G Network TAP NPB.pdf

3.Typical Application Structures

• Data VLAN Tagged Application(as following)

4.Specifications

5.Order Information

NT-VPP-4860G-SOFT-PEX NetTAP^® Visual Control Processor Extend Ports Software

NetTAP® (Full named Chengdu Shuwei Communication Technology Co., Ltd.)was established in 2007. Focusing on the Research and Development of Network TAPs/NPBs Communication Equipment, Data Security Analysis Equipment, which provides products and solutions in Big Data Acquisition, Data Storage, Data Monitoring, Data Processing and Data Analysis for Telecom, TV Broadcasting, Government, Education, IT, Finance, Bank, Hospital, Transportation, Energy, Power, Petroleum, Enterprise and other industries.

NetTAP® has launched various types of high-density devices such as: Fast Gigabit, 10 Gigabit Ethernet Network Traffic Replication, Aggregation, Distribution Network TAPs/NPBs (Network Packet Broker), intelligent Hybrid Traffic Network TAPs, 25G, 40G, 100G, etc. high density and Performance Network TAPs/NPBs(Network Packet Broker).

NetTAP® has a hardware production plant, all the communication products have complete Software and Hardware Independent Intellectual Property Rights, with complete Copyright Registration and Product Certification.

MATRIX NetInsight™ - A Fully Function Network Visibility Control Platform

MATRIX NetInsight™ Network System Value

1- Data Acquisition with centralized planning, eliminate monitoring blind spot

2- Free distribution of data, saving analysis of the overall investment

3- Data Security Control, Reduce the risk of disclosure

4- Overall Traffic visible, Abnormal Located more accurate, Fault analysis more useful

MATRIX NetInsight™ Function Architecture

1- User Interaction Layer

2- Big Data Analysis Layer

3- Data Storage Layer

4- Analysis Visibility Layer

5- Data Acquisition Layer

                                                                                       Zain Cloud Project of Saudi Arabia Telecom