Allied Telesis Layer 3 Switches - Page 22

Protecting the user
Create A Secure Network With Allied Telesis Managed Layer 3 Switches 22
Use the following configuration for edge switches 2 and 3 (AT-8648 switches in this
example):
ena stp=default
set stp=default mode=rapid
create vlan="voice" vid=101 private
add vlan=101 port=49-50 uplink frame=tagged
add vlan=101 port=1-48 frame=tagged
create vlan="video" vid=102 private
add vlan=102 port=49-50 uplink frame=tagged
add vlan=102 port=1-48 frame=tagged
create vlan="data" vid=103 private
add vlan=103 port=49-50 uplink frame=tagged
add vlan=103 port=1-48 frame=tagged
create vlan="management" vid=104 private
add vlan=104 port=49-50 uplink frame=tagged
add vlan=104 port=1-48 frame=tagged
# Give the management VLAN an appropriate IP address
enable ip
add ip int=vlan104 ip=<address-in-192.168.4.0-subnet>
Use the following configuration for the access router (a Rapier 24i switch in this example):
delete lacp port=3-24
enable lacp
create vlan="voice" vid=101
create vlan="video" vid=102
create vlan="data" vid=103
create vlan="management" vid=104
add vlan=101 port=1-2 frame=tagged
add vlan=102 port=1-2 frame=tagged
add vlan=103 port=1-2 frame=tagged
add vlan=104 port=1-2 frame=tagged
enable ip
add ip int=vlan101 ip=192.168.1.254 proxy=local
add ip int=vlan102 ip=192.168.2.254 proxy=local
add ip int=vlan103 ip=192.168.3.254 proxy=local
add ip int=vlan104 ip=192.168.4.254 proxy=local