To Next Page

To Previous Page

SecureStack C2 Configuration Guide 8-1

802.1Q VLAN Configuration

ThischapterdescribestheSecureStackC2system’scapabilitiestoimplement802.1QvirtualLANs

(VLANs).

VLAN Configuration Summary

VirtualLANsallowthenetworkadministratortopartitionnetworktrafficintologicalgroupsand

controltheflowoftha ttrafficthroughthenetwork.Oncethetrafficand,ineffect,theusers

creatingthetraffic,areassignedtoaVLAN,thenbroadcast andmulticasttrafficiscontained

withintheVLANandusers

canbeallowedordeniedaccesstoanyofthenetwork’sresources.

Also,someoralloftheportsonthedevicecanbeconfiguredasGVRPports,whichenableframes

receivedwithaparticularVLANIDandprotocoltobetransmittedonalimitednumberofports.

Thiskeeps

thetrafficassociatedwithaparticularVLANandprotocolisola tedfromtheotherparts

ofthenetwork.

Port String Syntax Used in the CLI

ForinformationonhowtodesignateVLANsandportnumbersintheCLIsyntax,referto“Port

StringSyntaxUsedintheCLI”onpage 5‐2.

Creating a Secure Management VLAN

Bydefaultatstartup,thereisoneVLANconfiguredontheSecureStackC2device.ItisVLANID

1,theDEFAULTVLAN.Thedefaultcommunityname,whichdeterminesremoteaccessfor

SNMPmanagement,issetto“public”withread‐writeaccess.

For information about... Refer to page...

VLAN Configuration Summary 8-1

Viewing VLANs 8-2

Creating and Naming Static VLANs 8-4

Assigning Port VLAN IDs (PVIDs) and Ingress Filtering 8-6

Configuring the VLAN Egress List 8-12

Setting the Host VLAN 8-16

Enabling/Disabling GVRP (GARP VLAN Registration Protocol) 8-18

Note: The device can support up to 1024 802.1Q VLANs. The allowable range for VLAN IDs is 1

to 4093. As a default, all ports on the device are assigned to VLAN ID 1, untagged.

Enterasys SecureStack C2 User Manual

Questions and Answers: