Allied Telesis at-8116 manual Security VLANs, Set-sec-vlan, Svlan Groups

Page 54

Virtual LAN Commands

Security VLANs

Each Security Virtual LAN (SVLAN) can contain one or more groups of ports. The group in a SVLAN are only allowed to send and receive packets to groups in the same SVLAN. If a group is not assigned to a specific SVLAN, it remains in the default SVLAN. Unicast packets with unknown destination addresses are sent to all port members in a SVLAN. Broadcast packets (broadcast address ffffffffff) remain within the VBC where they are received and are transmitted to only the ports in an SVLAN that are members of the receiving port VBC.

set-sec-vlan

This command establishes a Security Virtual LAN.

The SVLANs are group-oriented. There are eight groups of ports on the 8116 switch.

Table 10-1

SVLAN Groups

 

 

 

Group a

 

ports 1-2

 

 

 

Group b

 

ports 3-4

 

 

 

Group c

 

ports 5-6

 

 

 

Group d

 

ports 7-8

 

 

 

Group e

 

ports 9-10

 

 

 

Group f

 

ports 11-12

 

 

 

Group g

 

ports 13-14

 

 

 

Group h

 

ports 15-16

 

 

 

10-6

Image 54
Contents E R ’ S G U I D E Page Table of Contents Appendix B Administrative Interface RmonAdministrative Interface Accessing the Snmp Agent Network Management SystemsSystem Requirements VT100 Terminal Settings Software RequirementsTesting the Installation Accessing the Command Line Interface RemotelyPage Command Line Interface Features of the Command Line InterfaceGet-comm read write Entering CommandsSYSconsole pin Command pin not found Get-comm read Get-comm writeSYSconsole ping 129.1.1.7 ? ping IP traffic generator System Commands System CommandsSYSconsolesystem Command Line Interface Structure SYSconsoleget-c? Command get-c not found2Commands Matching get-c Commands Groups SYSconsole?SYSconsolehelp-kbd Console CommandsHelp-kbd Console Function KeysClear LoginBanner LogoutSet-attr-text Set-attr-promptSet-attr-msg Set-passwdConsole Commands System Commands Sys-statSystem Commands SYSconsoleGet-stst-level Warm-resetCold-reset Set-stst-level levelSet-sw-file Init-nvramGet-sw-file Get-tftp-srvrSw-dnld Set-fg-paramStart-fg Stop-fg Set-ip IP CommandsGet-ip Set-ipIPaddressSet-ip-cfg If no IP Config. is definedGet-ip-cfg Set-ip-cfg IPaddress netmask broadcastClear-ip-cfg Set-gatew SYSconsoleget-gatew Default gateway address isGet-gatew Set-gatew IPaddressDel-arp-entry Address Resolution CommandsGet-arp-tbl SYSconsoleget-arp-tbl IfIndex IpAddressAdd-arp-entry 194.090.136.126Ping-stop Ping CommandsPing SYSconsoleping 194.90.136.23SYSconsoleping 194.90.136.20 Echo RequestsEcho Responses Ping process press CR for prompt SYSconsole Echo responses Ping process press Ping-stop Stop the active ping ProcessPage Get-comm Snmp CommandsSnmp Community String Commands Get-comm readwriteGet-auth Snmp Trap Message CommandsSet-comm Set-authGet-traps Add-trapSYSconsoledel-trap Del-trapGet-rmon-state SYSconsoleget-rmon-stateSwitching Database Commands LockLearning Table Get-lt-entryGet-lt-16 SYStelnetget-lt-16Find-lt-addr SYStelnetfind-lt-addr 0060e8112265MAC Address 01-02-03-04-05-06 not in LT Del-lt-entrySYSconsolefind-lt-addr Del-lt-entry indexGet-lt-age Del-lt-addrAdd-lt-entry SYSconsoledel-lt-entrySet-lt-age Set-lt-age runnvramall agingtimeSYSconsoleset-lt-age all Page Virtual LAN Commands Type vlan to view the related commands SYSconsolevlanVirtual Broadcast Domains VBC Get-con-matrixSYSconsoleget-con-matrix ==========================Set-vbc-domain all Del-vbc-domainSet-vbc-domain Set-vbc-domain runnvramall portlist Del-vbc-domain runnvram domainidGet-vbc-matrix SYSconsoleget-vbc-matrixSecurity VLANs Set-sec-vlanSvlan Groups 3 4 5 6 7 8 9 0 1 Del-sec-vlanLANs 0 0 0 0 0 0 0 1 1 1 1 1 1 Del-sec-vlan runnvram lanidSYSconsoleget-svlan-tbl run Get-svlan-tblGet-svlan-tbl runnvram + + + + + + + + SYSconsoleGet-svlan-matrix Get-svlan-matrix runnvram SYSconsoleget-svlan-matrix runPage Stop-mon Port Monitoring CommandsSet-mon-port Get-nv-monSave-mon Clear-nv-monPort Configuration Commands Get-port-cfgSYSconsoleget-port-cfg Set-port-dplex Set-port-dplex portnumber halffullSYSconsoleset-port-dplex 2 full Set-aggr-mode Set-speed-selSet-port-state SYSconsoleset-aggr-modePage Switching Statistics Commands Clr-cntGet-eth-cnt Switching Statistics Commands Get-sdist-cnt Get-colls-cntGet-rmon-cnt SYSconsoleget-colls-cntGet-mgm-brcnt =============================================15637 1123754 Get-stp Spanning Tree CommandsSet-stp enabledisable Set-stpGet-st-syscfg Get-st-bcfgGet-st-pcfg Set-br-prioSet-prt-prio Set-prt-enbSet-prt-pcost Page Using an Snmp Manager Configuring the AT-8116 Snmp AgentSYSconsoleset-gatew Read public New read communityPage Software Troubleshooting Page Tftp Client Download Procedure Software DownloadingRequirements Tftp Server Download Procedure System Defaults System Default ValuesPage Command Line Reference Table C-1 Console CommandsTable C-2 System Commands Table C-3IP Commands Table C-4SNMP CommandsTable C-5 Switching Database Commands Table C-6 Virtual LAN CommandsTable C-7Port Configuration Commands Table C-8Switching Statistics CommandsTable C-9Spanning Tree Commands