Chapter 19
| VLAN Commands
Configuring Protocol-based VLANs
– 489 –
Command Mode
Interface Configuration (Ethernet, Port Channel)
Command Usage
◆ Refer to the Command Usage section for the l2protocol-tunnel tunnel-dmac
command.
◆ For L2PT to function properly, QinQ must be enabled on the switch using the
dot1q-tunnel system-tunnel-control command, and the interface configured to
802.1Q tunnel mode using the switchport dot1q-tunnel mode command.
Example
Console(config)#dot1q-tunnel system-tunnel-control
Console(config)#interface ethernet 1/1
Console(config-if)#switchport dot1q-tunnel mode access
Console(config-if)#switchport l2protocol-tunnel spanning-tree
Console(config-if)#
show
l2protocol-tunnel
This command shows settings for Layer 2 Protocol Tunneling (L2PT).
Command Mode
Privileged Exec
Example
Console#show l2protocol-tunnel
Layer 2 Protocol Tunnel
Tunnel MAC Address : 01-12-CF-00-00-00
Interface Protocol
----------------------------------------------------------
Eth 1/ 1 Spanning Tree
Console#
Configuring Protocol-based VLANs
The network devices required to support multiple protocols cannot be easily
grouped into a common VLAN. This may require non-standard devices to pass
traffic between different VLANs in order to encompass all the devices participating
in a specific protocol. This kind of configuration deprives users of the basic benefits
of VLANs, including security and easy accessibility.
To avoid these problems, you can configure this switch with protocol-based VLANs
that divide the physical network into logical VLAN groups for each required
protocol. When a frame is received at a port, its VLAN membership can then be
determined based on the protocol type in use by the inbound packets.
To Next Page
Loading...
