Enabling/Disabling VLAN Authentication Configuring VLANs
page 4-12 OmniSwitch AOS Release 6 Network Configuration Guide September 2009
Enabling/Disabling VLAN Authentication
To enable/disable authentication on an existing VLAN, use the vlan authentication command. For exam-
ple, the following commands enable authentication on VLAN 955 and disable it on VLAN 455:
-> vlan 955 authentication enable
-> vlan 455 authentication disable
Once authentication is enabled on a VLAN, then only authenticated mobile port devices can join the
VLAN after completing the appropriate log-in process. To enable authentication on a mobile port, use the
vlan port authenticate command. For more information about mobile port commands and Layer 2
authentication for Alcatel-Lucent switches, see Chapter 6, “Assigning Ports to VLANs,” and Chapter 36,
“Configuring Authenticated VLANs.”
Enabling/Disabling Source Learning
Source learning can be disabled on a VLAN. Disabling source learning can be beneficial in a ring topol-
ogy. There is no limit on the number of ports that can belong to a VLAN that has source learning disabled,
but it is recommended to include only the two ports connecting the switch to a ring.
To enable/disable source learning on a VLAN, use the vlan source-learning command. For example, the
following command disabled source learning on VLAN 10:
-> vlan 10 source-learning disable
Disabling source learning on a VLAN will cause all traffic in that VLAN to be flooded as all traffic would
be considered unknown unicast.
ADD a ring EXAMPLE
Configuring VLAN Router Interfaces
Network device traffic is bridged (switched) at the Layer 2 level between ports that are assigned to the
same VLAN. However, if a device needs to communicate with another device that belongs to a different
VLAN, then Layer 3 routing is necessary to transmit traffic between the VLANs. Bridging makes the deci-
sion on where to forward packets based on the packet’s destination MAC address; routing makes the deci-
sion on where to forward packets based on the packet’s IP or IPX network address (e.g., IP - 21.0.0.10,
IPX - 210A).
Alcatel-Lucent switches support routing of IP and IPX traffic. A VLAN is available for routing when at
least one router interface is defined for that VLAN and at least one active port is associated with the
VLAN. Up to eight IP interfaces and one IPX interface can be configured for each VLAN. The maximum
number of IP interfaces allowed for the entire switch is 4094.
If a VLAN does not have a router interface, the ports associated with that VLAN are in essence firewalled
from other VLANs. For information about how to configure router interfaces, see Chapter 24, “Configur-
ing IP,” and “Configuring an IPX Router Interface” on page 4-13.
To Next Page
Loading...
