17-20
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 17 Configuring VLANs, VTP, and VMPS
VLAN Membership Policy Server
This example shows how to display information for VTP devices in a domain:
Switch# show vtp devices
Retrieving information from the VTP domain, please wait for 5 seconds.
VTP Feature Conf Revision Primary Server Device ID Device Description
----------- ---- -------- ------------------------------ ------------------
VLAN No 18 0016.9c6d.5300 0012.011a.0d00 R2
VLAN No 18 0016.9c6d.5300 0012.4371.9ec0 R1
MST Yes 4 0012.4371.9ec0=0012.4371.9ec0 R1
Switch#
VLAN Membership Policy Server
This section describes how to configure dynamic port VLAN membership through the VLAN
Membership Policy Server (VMPS), and includes the following subsections:
• About VMPS, page 17-20
• Overview of VMPS Clients, page 17-22
• Dynamic Port VLAN Membership Configuration Example, page 17-28
• VMPS Database Configuration File Example, page 17-31
About VMPS
These subsections describe what a VMPS server does and how it operates:
• Understanding the VMPS Server, page 17-20
• Security Modes for VMPS Server, page 17-21
• Fallback VLAN, page 17-22
• Illegal VMPS Client Requests, page 17-22
Understanding the VMPS Server
A VLAN Membership Policy Server (VMPS) provides a centralized server for selecting the VLAN for
a port dynamically based on the MAC address of the device connected to the port. When the host moves
from a port on one switch in the network to a port on another switch in the network, that switch
dynamically assigns the new port to the proper VLAN for that host.
A Catalyst 4500 series switch running Cisco IOS software does not support the functionality of a VMPS.
It can only function as a VLAN Query Protocol (VQP) client, which communicates with a VMPS
through the VQP. For VMPS functionality, you need to use a Catalyst 4500 series switch (or Catalyst
6500 series switch) running Catalyst operating system (OS) software.
VMPS uses a UDP port to listen to VQP requests from clients, so, it is not necessary for VMPS clients
to know if the VMPS resides on a local or remote device on the network. Upon receiving a valid request
from a VMPS client, a VMPS server searches its database for an entry of a MAC-address to VLAN
mapping.
In response to a request, the VMPS takes one of the following actions:
• If the assigned VLAN is restricted to a group of ports, the VMPS verifies the requesting port against
this group and responds as follows:
To Next Page
Loading...
