3Com WX2200 3CRWX220095A, WXR100 3CRWXR10095A Security l2-restrict, Display vlan config vlan-id

Configuring and Managing VLANs 95

Displaying VLAN Information

The following commands restrict Layer 2 forwarding of client data in VLAN abc_air to the default routers with MAC address aa:bb:cc:dd:ee:ff and 11:22:33:44:55:66, and display restriction information and statistics:

WX1200# set security l2-restrict vlan abc_air mode enable

permit-mac aa:bb:cc:dd:ee:ff 11:22:33:44:55:66
success: change	accepted.
WX1200# display	security l2-restrict		Hits
VLAN Name	En Drops	Permit MAC

---- ----------- -- ---------- ------------------- ----------

1 abc_air Y	0 aa:bb:cc:dd:ee:ff	5947
	11:22:33:44:55:66	9

The En field indicates whether restriction is enabled. The Drops field indicates how many packets were addressed directly from one client to another and dropped by MSS. The Hits field indicates how many packets the permitted default router has received from clients.

To reset the statistics counters, use the following command:

clear security l2-restrict counters [vlan vlan-idall]

To display VLAN configuration information, use the following command:

display vlan config [vlan-id]

To display information for VLAN burgundy, type the following command:

WX1200# display vlan config burgundy							Port
VLAN	Name	Admin	VLAN	Tunl		Tag
		Status	State Affin Port				State
----	----------------	------	----- -----		----------------	-----	-----
2	burgundy	Up	Up	5	2	none	Up
					3	none	Up
					4	none	Up
4094	web-aaa	Up	Up	0	6	none	Up
					2	4094	Up

The display can include MAP access ports and wired authentication ports, because MSS dynamically adds these ports to a VLAN when handling user traffic for the VLAN.

(For information about the fields in the output, see the Wireless LAN Switch and Controller Command Reference.)