Command Line Interface
4-208
4
Example
Configuring Protocol-based VLANs
The network devices required to support multiple protocols cannot be easily grouped
into a common VLAN. This may require non-standard devices to pass traffic
between different VLANs in order to encompass all the devices participating in a
specific protocol. This kind of configuration deprives users of the basic benefits of
VLANs, including security and easy accessibility.
To avoid these problems, you can configure this switch with protocol-based VLANs
that divide the physical network into logical VLAN groups for each required protocol.
When a frame is received at a port, its VLAN membership can then be determined
based on the protocol type in use by the inbound packets.
To configure protocol-based VLANs, follow these steps:
1. First configure VLAN groups for the protocols you want to use (page 4-195).
Although not mandatory, we suggest configuring a separate VLAN for each
major protocol running on your network.
2. Create a protocol group for each of the protocols you want to assign to a VLAN
using the protocol-vlan protocol-group command.
3. Then map the protocol for each interface to the appropriate VLAN using the
protocol-vlan protocol-group vlan command.
Console#show vlan private-vlan
Primary Secondary Type Interfaces
-------- ----------- ---------- ------------------------------
5 primary Eth1/ 3
5 6 community Eth1/ 4 Eth1/ 5
Console#
Table 4-7 Protocol-based VLAN Commands
Command Function Mode Page
protocol-vlan protocol-group Create a protocol group, specifying the supported protocols GC 4-209
protocol-vlan protocol-group
vlan
Maps a protocol group to a VLAN GC 4-209
show protocol-vlan
protocol-group
Shows the configuration of protocol groups PE 4-210
show protocol-vlan
protocol-group-vid
Shows the VLANs assigned to a protocol group PE 4-211
To Next Page
Loading...
Need help?
General