Enterasys SecureStack C2 C2G170-24

SecureStack C2 Configuration Guide 10-1
10
802.1Q VLAN Configuration
ThischapterdescribestheSecureStackC2system’scapabilitiestoimplement802.1QvirtualLANs
(VLANs).
VLAN Configuration Summary
VirtualLANsallowthenetworkadministratortopartitionnetworktrafficintologicalgroupsand
controltheflowofthattrafficthroughthenetwork.Oncethetrafficand,ineffect,theusers
creatingthetraffic,areassignedtoaVLAN,thenbroadcastandmulticasttrafficiscontained
withintheVLANandusers
canbeallowedordeniedaccesstoanyofthenetwork’sresources.
Also,someoralloftheportsonthedevicecanbeconfiguredasGVRPports,whichenableframes
receivedwithaparticularVLANIDandprotocoltobetransmit tedonalimitednumberofports.
Thiskeeps
thetrafficassociatedwithaparticularVLANandprotocolisolatedfromtheotherparts
ofthenetwork.
Port String Syntax Used in the CLI
ForinformationonhowtodesignateVLANsandportnumbersintheCLIsyntax,referto“Port
StringSyntaxUsedintheCLI”onpage 7‐2.
Creating a Secure Management VLAN
Bydefaultatstartup,thereisoneVLANconfiguredontheSecureStackC2device.ItisVLANID
1,theDEFAULTVLAN.Thedefaultcommunityname,whichdeterminesremoteaccessforSNMP
management,issetto“public”withread‐writeaccess.
For information about... Refer to page...
VLAN Configuration Summary 10-1
Viewing VLANs 10-2
Creating and Naming Static VLANs 10-5
Assigning Port VLAN IDs (PVIDs) and Ingress Filtering 10-8
Configuring the VLAN Egress List 10-13
Setting the Host VLAN 10-18
Enabling/Disabling GVRP (GARP VLAN Registration Protocol) 10-20
Note: The device can support up to 1024 802.1Q VLANs. The allowable range for VLAN IDs is 1
to 4093. As a default, all ports on the device are assigned to VLAN ID 1, untagged.