Configuring VLANs 597
Configuring IP-Based VLANs
Beginning in Privileged EXEC mode, use the following commands to 
associate an IP subnet with a configured VLAN. The VLAN does not need to 
be configured on the system to associate an IP subnet with it. You can create 
up to 256 VLAN to MAC address associations.
Configuring a Protocol-Based VLAN
Beginning in Privileged EXEC mode, use the following commands to create 
and name a protocol group, and associate VLANs with the protocol group. 
When you create a protocol group, the switch automatically assigns it a 
unique group ID number. The group ID is used for both configuration and 
script generation to identify the group in subsequent commands. 
A protocol group may have more than one interface associated with it, but 
each interface and protocol combination can be associated with one group 
only. If adding an interface to a group causes any conflicts with protocols 
currently associated with the group, adding the interface(s) to the group fails 
and no interfaces are added to the group. Ensure that the referenced VLAN is 
created prior to the creation of the protocol-based group except when GVRP 
is expected to create the VLAN.
Command Purpose
configure Enter global configuration mode.
vlan database Enter VLAN database mode.
vlan association subnet 
ip-address subnet-mask 
vlanid
Associate an IP subnet with a VLAN.
•
ip-address
 — Source IP address. (Range: Any valid IP 
address)
•
subnet-mask
 — Subnet mask. (Range: Any valid subnet 
mask)
•
vlanid
 — VLAN to associated with subnet. (Range: 1-
4093)
CTRL + Z Exit to Privileged EXEC mode.
show vlan association 
subnet [
ip-address ip-
mask ]
Display the VLAN associated with a specific configured IP-
Address and netmask. If no IP Address and net mask are 
specified, the VLAN associations of all the configured IP-
subnets are displayed.