Configuring VLANs
Fixed Switch Configuration Guide 9-11
Example Configuration
The following shows an example configuration using the steps in Procedure 9-1. In this example,
VLAN 100 is created and named VLANRED. Ports ge.1.2, 1.3 and 1.4 are assigned to VLAN 100
and added to its egress list. VLAN 100 is then configured as a routing interface with an IP address
of 120.20.20.24.
C5(su)->set vlan create 100
C5(su)->set vlan name 100 VLANRED
C5(su)->set port vlan ge.1.2-4 100
The PVID is used to classify untagged frames as they
ingress into a given port. Would you like to add the selected
port(s) to this VLAN's untagged egress list and remove them
from all other VLANs untagged egress list (y/n) [n]?
NOTE: Choosing 'y' will not remove the port(s) from previously
configured tagged egress lists.
y
C5(su)->router
C5(su)->router>enable
C5(su)->router#configure
Enter configuration commands:
C5->(su)->router(Config)#
C5->(su)->router(Config)#interface vlan 100
C5->(su)->router(Config-if(Vlan 100))#ip address 120.20.20.1 255.255.255.0
C5->(su)->router(Config-if(Vlan 100))#no shutdown
If you want to configure a port to drop incoming frames that do not have a VLAN ID that matches
a VLAN ID on the port’s egress list, use the set port ingress-filter command. For example:
C5(su)->set port ingress-filter ge.1.2-4 enable
If you want to configure a port to discard tagged or untagged incoming frames, use the set port
discard command. For example, to configure the ports to drop tagged frames on ingress:
C5(su)->set port discard ge.1.2-4 tagged
Creating a Secure Management VLAN
If you are configuring an Enterasys device for multiple VLANs, it may be desirable to configure a
management-only VLAN. This allows a station connected to the management VLAN to manage
7. Optionally, choose to discard tagged or
untagged, (or both) frames on selected ports.
Select none to allow all frames to pass through.
set port discard port-string
{tagged | untagged | none | both}
8. If the device supports routing, enter router
configuration mode and configure an IP address
on the VLAN interface.
router
enable
configure terminal
interface vlan vlan_id
ip address ip-address ip-mask
no shutdown
Note: Each VLAN interface must be configured for routing separately using the interface
command shown above. To end configuration on one interface before configuring another, type
exit at the command prompt. Enabling interface configuration mode is required for completing
interface-specific configuration tasks.
Procedure 9-1 Static VLAN Configuration (continued)
Step Task Command(s)
To Next Page
Loading...
Need help?
General