Virtual LANs Research Articles

Strategic Network Management for Modern Campuses: A Comprehensive Framework

Campus handling of networks has become critical in the continuously changing world of higher education. This paper offers a thorough method for managing and safeguarding networks in a campus setting with multiple departments. Our approach focuses on four departments: the administrative, civil, computer science and engineering (CSE), and electrical and electronics engineering (EEE) departments. It combines multiple networking technologies to improve security and maximize speed. Network division using virtual LANs (VLANs), efficient IP address allocation using Variable Length Subnet Masks (VLSM), simplified network configuration using Dynamic Host Configuration Protocol (DHCP), dynamic routing using Routing Information Protocol version 2 (RIPv2), granular access control using Access Control Lists (ACLs), enhanced security using Network Address Translation (NAT), secure remote access using Secure Shell version 2 (SSHv2), and improved network resilience through Link Aggregation are the main components of our system.

A Survey on the Implementation and Management of Secure Virtual Private Networks (VPNs) and Virtual LANs (VLANs) in Static and Mobile Scenarios

Nowadays, the demand for connection between the remote offices of a company, or between research locations, and constantly increasing work mobility (partly due to the current pandemic emergency) have grown hand in hand with the quality and speed of broadband connections. The logical consequence of this scenario is the increasingly widespread use of Virtual Private Network (VPN) connections. They allow one to securely connect the two ends of a connection via a dedicated network, typically using the Internet and reducing the costs of Content Delivery Network (CDN) lines (dedicated connections). At the same time, Virtual Local Area Networks (VLANs) are able to decrease the impact of some scalability issues of large networks. Given the background above, this paper is focused on overviewing and surveying the main progresses related to VPNs and VLANs in wireless networks, by collecting the most important contributions in this area and describing how they can be implemented. We state that security issues in VLANs can be effectively mitigated through the combination of good network-management practices, effective network design and the application of advanced security products. However, obviously, the implementation of VPNs and VLANs poses specific issues regarding information and network security; thus some good solutions are also surveyed.

Megalos: A Scalable Architecture for the Virtualization of Large Network Scenarios

We introduce an open-source, scalable, and distributed architecture, called Megalos, that supports the implementation of virtual network scenarios consisting of virtual devices (VDs) where each VD may have several Layer 2 interfaces assigned to virtual LANs. We rely on Docker containers to realize vendor-independent VDs and we leverage Kubernetes for the management of the nodes of a distributed cluster. Our architecture does not require platform-specific configurations and supports a seamless interconnection between the virtual environment and the physical one. Also, it guarantees the segregation of each virtual LAN traffic from the traffic of other LANs, from the cluster traffic, and from Internet traffic. Further, a packet is only sent to the cluster node containing the recipient VD. We produce several example applications where we emulate large network scenarios, with thousands of VDs and LANs. Finally, we experimentally show the scalability potential of Megalos by measuring the overhead of the distributed environment and of its signaling protocols.

Fast privacy-preserving network function outsourcing

In this paper, we present the design and implementation of SplitBox, a system for privacy-preserving processing of network functions outsourced to cloud middleboxes—i.e., without revealing the policies governing these functions. SplitBox is built to provide privacy for a generic network function that abstracts the functionality of a variety of network functions and associated policies, including firewalls, virtual LANs, network address translators (NATs), deep packet inspection, and load balancers. We present a scalable design aiming to provide high throughput and low latency, by distributing functionalities to a few virtual machines (VMs), while providing provably secure guarantees. We implement SplitBox inside FastClick, an extension of the Click modular router, using Intel’s DPDK to handle packet I/O. We evaluate our prototype experimentally to find its bottlenecks and stress-test its different components, vis-à-vis two widely used network functions, i.e., firewall and VLAN tagging. Our evaluation shows that, on commodity hardware, SplitBox can process packets close to line rate (i.e., 8.9Gbps) with up to 50 traversed policies.

An Algorithm of Physical Network Topology Discovery in Multi-VLANs

The most recent physical topology discovery knowledge of the Ethernet network is the key to network management tasks. Virtual LANs (VLANs) allow network managers to completely break the correlation between the logical and physical network by grouping the interfaces of the same network elements into different subnets. An efficient and general algorithm for discovering physical network topology across multi-VLANs is very necessary. Our topology discovery algorithms are simple for VLANs if we know the VLANs interface groups. The algorithm based on MIB information of SNMP standard is widely supplied by modern IP network elements and does not need modify the operating system software running on hosts or elements. The experimental results prove the correctness of the algorithm and the sufficient and necessary conditions for the uniqueness of the restored topology.

Towards Better Traffic Localization of Virtual LANs Using Genetic Algorithm

Towards Better Traffic Localization of Virtual LANs Using Genetic Algorithm

Management System of Computer Laboratory in Liberal College

The university network is very popular, the use of computer networks for laboratory management has become a necessity. We proposed the construction of the building room memorandum ideas and some strategies that can be implemented, the better solution normative room management issues. According to the actual use of university computer room design possible combination of VLAN and VPN solutions. We used a more mature support for multiple operating systems and supports SNMP network devices Mrtg tools to help us achieve traffic monitoring, reducing the need for repeat open, traffic monitoring can be a good solution to the problem. Use of virtual LANs, the use of wireless network technology, the use of remote monitoring technology, the use of Web sites and remote access, have made these physical room on the formation of a relatively independent logical connections to facilitate the reunification of management and maintenance.

On building multiple spanning trees and VLAN assignment in metro ethernet networks

While most of today's research effort is being devoted to wireless technologies involving the tiniest and most sophisticated devices, Ethernet is evolving from a best effort, plug-and-play LAN technology, towards a carrier-grade WAN technology. Most of the new Ethernet standards rely on spanning tree protocols (STP) such as Rapid STP (RSTP) and multiple STP (MSTP). RSTP offers faster convergence than the legacy STP but like its predecessor, it uses a single tree to carry all the traffic offered to the network, seriously impacting throughput and bandwidth usage. MSTP however supports multiple spanning tree instances but does not provide generic methods to build those instances. Moreover, MSTP does not provide efficient methods to map between spanning trees and virtual LANs (VLAN). Operators must manually provision this mapping which seriously affects network operation expenditures and network performance. In this paper, we introduce a multiple spanning tree generation algorithm (MSTGA) and a VLAN-spanning tree mapping algorithm (VSTMA) aimed at helping operators leverage their networks, save bandwidth, and support service level agreements with their customers. These algorithms can be used to extend and/or work with MSTP. We show that MSTGA maximizes throughput while VSTMA minimizes bandwidth usage. We also show that combining edge-disjoint spanning trees with VSTMA constitutes the best bandwidth/throughput tradeoff. © 2012 Wiley Periodicals, Inc. NETWORKS, 2013

Efficiency of Four Virtual LANs Switches with Equal Processing Times

Virtual LANs (VLANs) are introduced as some alternative switches to solve for the traffic problems of those LAN networks with Hubs. The idea is to create some collections in the whole LAN network, such collections are the so called VLANs. Appropriate switches (one switch or more of up to 24 ports) are designed to interconnect those VLANs. The design of such VLAN switches looks like the design of Look-Up tables to facilitate routing (similar to those used in CISCO networks). In this paper, an analytical model for such VLANs is proposed and then compared with single VLAN switch from the point of view of validity and speed characteristics.

Despite its humanistic values, organisation development consultancy practice appears to be facing implementation challenges, especially regarding development programmes in the public and private sectors. OD's agenda for development programmes is to ensure

Fundamental to the Network Administrator's consideration of risk on a network are issues of security namely; confidentiality, integrity and availability of information assets. The ability to effectively and efficiently manage the network and make room for growth without degradation in network performance are equally considerable concerns. The segmentation of a significantly large Local Area Network with a possible annual growth rate of over 10% is undoubtedly the surest way to effectively manage the network, ensure security of information assets and make it scalable. This paper seeks to assess the Pentecost University College(PUC) campus network at Sowutuom to determine how optimally segmented it is and the most practical option of using Virtual LANs to optimize the segmentation for effective and efficient security, management and scalability. Based on the information gathered and analysis carried out on the network, a proposal is advanced to enhance the segmentation of the campus network with an eye towards the future growth.

Quality of Service in home network: VLAN zeroconfiguration network

The proliferation of devices together with the necessity of being constantly connected to the network is considered to cause the need for 'Autoconfiguration'. At the same time, it is necessary to guarantee an adequate level of quality of service. So, we propose to use together zeroconfiguration protocols and Virtual LANs.

Automatic VLAN creation based on on-line measurement

Virtual LANs (VLANs) permit hosts connected to a LAN switch to be grouped together into logical groups as a function of some management policy rather than simply of their physical location. Commercial LAN switches support a variety of policies based on either physical or logical addresses, protocol types, tagged frames, or user defined rules. The objective of these policies is the same: to reduce the amount of traffic that needs to be routed by grouping together hosts which are likely to communicate with each other into the same virtual LAN. This paper proposes a novel and more direct approach, it shows how VLANs can be created and removed dynamically as a function of the measured traffic patterns across the network. This is both simpler than configuring many static rules and permits the VLAN configuration to adapt to the evolution in the traffic patterns. The latter point is especially important in future LANs supporting peer-to-peer continuous media services, such as IP telephony or video-conferencing, in which clusters of hosts come together to communicate with each other intensively for relatively short periods of time and then form into new clusters.

ANAHTARLAMA DEVRİMİ

Networking Communications have passetl through three major eras and is now entering its fourth. Each of these periods was driven by a new generation of computing hardware and applications, and each dramatically expanded the uses of computing. IVe are now at the beginning of the next era: that of switched, dedicated, high-speed networking. On this paper, three evolutions are introduced in short, and the concepts of the evolution that we are in are tried to be examined with its general lines, ATM switching, Virtual LANs and routing which are known as the basic elements of the switching revolution are investigated.

Communications

The author gives an overview of the latest developments in communications. The main features being: Internet access over TV cables; TV signals transmitted over power and phone lines; cheap phone like service over the Internet; and wireless networks including the Internet. Multimedia media, ISDN, virtual LANs, next generation Internet protocol, wireless telephony, and network security are discussed.