Configuring VLANs
9-10 Configuring VLANs
4. Assign switch ports to the VLAN.
This sets the port VLAN ID (PVID). The PVID
determines the VLAN to which all untagged
frames received on the port will be classified.
Optionally, specify whether or not the ports
should be added to the VLAN’s untagged egress
list and removed from other untagged egress
lists.
set port vlan port-string vlan-id
[modify-egress | no-modify-egress]
Note: If the VLAN specified has not already been created, the set port vlan command will create
it. It will also add the VLAN to the port’s egress list as untagged, and remove the default VLAN from
the port’s egress list. This automatically changes the existing untagged VLAN egress permission to
match the new PVID value.
5. If necessary, configure VLAN egress, which
determines which ports a frame belonging to the
VLAN may be forwarded out on.
Static configuration:
Add the port to the VLAN egress list for the
device.
• The default setting, tagged, allows the port to
transmit frames for a particular VLAN.
• The untagged setting allows the port to
transmit frames without a VLAN tag. This
setting is usually used to configure a port
connected to an end user device.
• The forbidden setting prevents the port from
participating in the specified VLAN and
ensures that any dynamic requests for the
port to join the VLAN will be ignored.
If necessary, remove ports from the VLAN
egress list.
• If specified, the forbidden setting will be
cleared from the designated ports and the
ports will be reset as allowed to egress
frames, if so configured by either static or
dynamic means.
•If forbidden is not specified, tagged and
untagged egress settings will be cleared from
the designated ports.
Dynamic configuration:
By default, dynamic egress is disabled on all
VLANs. If dynamic egress is enabled for a
VLAN, the device will add the port receiving a
frame to the VLAN’s egress list as untagged
according to the VLAN ID of the received frame.
set vlan egress vlan-id port-
string forbidden | tagged |
untagged
clear vlan egress vlan-list port-
string [forbidden]
set vlan dynamicegress vlan-id
{enable | disable}
6. Optionally, enable ingress filtering on a port to
drop those incoming frames that do not have a
VLAN ID that matches a VLAN ID on the port’s
egress list.
set port ingress-filter port-
string enable
Procedure 9-1 Static VLAN Configuration (continued)
Step Task Command(s)
To Next Page
Loading...
Need help?
General