Enterasys Matrix DFE-Gold Series

VLAN Configuration Summary
7-2 802.1Q VLAN Configuration
Port Assignment Scheme
Forinformationonthisdevice’sportassignmentscheme,referto“PortStringSyntaxUsedinthe
CLI”onpage 4‐2.
Port String Syntax Used in the CLI
ForinformationonhowtodesignateportnumbersintheCLIsyntax,referto“PortStringSyntax
UsedintheCLI”onpage 4‐2.
Preparing for VLAN Configuration
AlittleforethoughtandplanningisessentialtoagoodVLANimplementation.Beforeattempting
toconfigureasingledeviceforVLANoperation,considerthefollowing:
•HowmanyVLANswillberequired?
•Whatstationswillbelongtothem?
•Whatportsareconnectedtothose stations?
•WhatportswillbeconfiguredasGVRP‐awareports?
ItisalsohelpfultosketchoutadiagramofyourVLANstrategy.
About PVIDs and Policy Classification to a VLAN
PortVLANIDs(PVIDs)assignVLANIDstountaggedframesononeormoreports.Usingtheset
portvlancommandasdescribedin“setportvlan”onpage 7‐10,youcan,forexample,assign
ports1,5,8,and9toVLAN3.Untaggedframesreceivedonthoseports
willbeassignedtoVLAN
3.(Bydefault,allportsaremembersofVLANID1,thedefaultVLAN.)
PolicyclassificationtoaVLAN,asdescribedinChapter 8,“setpolicyrule”onpage 8‐13,takes
precedenceoverPVIDassignmentif:
•PolicyclassificationisconfiguredtoaVLANasdescribed
in“setpolicyrule”onpage 8‐13,
and
•PVIDoverridehasbeenenabledforapolicyprofile,andassignedtoport(s)associatedwith
thePVIDasdescribedin“setpolicyprofile”onpage 8‐3.
Formoreinformationaboutconfiguringuserpolicyprofiles,includingPVIDoverride,protocol‐
basedpolicyclassificationa
VLANorClassofService,andassigningportstopolicyprofiles,refer
toChapter 8.
Creating a Secure Management VLAN
IftheMatrixSeriesdeviceistobeconfiguredformultipleVLAN’s,itmaybedesirableto
configureamanagement‐onlyVLAN.ThisallowsastationconnectedtothemanagementVLAN
tomanagethedevice.Italsomakesmanagementsecurebypreventingconfigurationviaports
assignedtootherVLANs.
Tocreate
asecuremanagementVLAN,youmust:
1. CreateanewVLAN.(“setvlan”onpage 7‐6)
2. SetthePVIDforthehostportandthedesiredswitchporttotheVLANcreatedinStep1.(“set
portvlan”onpage 7‐10)