Allied Telesis Layer 3 Switches manual Edge switch

Appendix: Configuration scripts for MAC-forced forwarding example

Edge switch 2

Edge switch 2 is connected to port 50 of edge switch 1. The configuration is similar to edge switch 1—differences are in bold:

# System configuration

set system name="Edge Switch 2"

#VLAN general configuration create vlan=Voice vid=100 private create vlan=Video vid=200 private create vlan=Data vid=300 private create vlan=Management vid=400 private create vlan=EAN_Management vid=500 private

#STP general configuration

enable stp=default

set stp=default mode=rapid

#VLAN port configuration

#ports 1 and 2 are not in any VLANs

add vlan=100 port=49-50 uplink frame=tagged add vlan=100 port=15 frame=tagged

add vlan=100 port=14 frame=tagged

add vlan=200 port=49-50 uplink frame=tagged add vlan=200 port=15 frame=tagged

add vlan=200 port=14 frame=tagged

add vlan=300 port=49-50 uplink frame=tagged add vlan=300 port=15 frame=tagged

add vlan=300 port=14 frame=tagged

add vlan=400 port=49-50 uplink frame=tagged add vlan=400 port=15 frame=tagged

add vlan=400 port=14 frame=tagged

add vlan=500 port=49-50 uplink frame=tagged

# STP port configuration

set stp="default" port=1-48 edgeport=yes

#DHCP Snooping configuration enable dhcpsnooping

enable dhcpsnooping arpsecurity enable dhcpsnooping option82

set dhcpsnooping port=14 maxleases=4 set dhcpsnooping port=15 maxleases=4 set dhcpsnooping port=49 trusted=yes set dhcpsnooping port=50 trusted=yes

add dhcpsnooping binding=00-0d-da-00-00-37 ip=172.16.4.202 interface=vlan400 port=14 router=172.16.4.254

add dhcpsnooping binding=00-0d-da-00-02-eb ip=172.16.4.203 interface=vlan400 port=15 router=172.16.4.254

#IP configuration

enable ip

add ip int=vlan500 ip=172.16.5.102 mask=255.255.255.0

#MACFF configuration enable macff int=vlan100 enable macff int=vlan200 enable macff int=vlan300 enable macff int=vlan400 enable macff int=vlan500

Create A Secure Network With Allied Telesis Managed Layer 3 Switches 28