Enterasys Networks 2H258, 2E253, 2H253, 2H252 manual PCs

Example 5, Using Dynamic Egress to Control Traffic

Figure 12-18 Example 5, Dynamic Egress Application

PCs

AppleTalk

IP

AppleTalk

IP

IP IP

AppleTalk

IP

AppleTalk

IP

1 2 3 4 5 6

S1

7

Web

Server

30691_75

Solving the Problem

In this example, Switch 1 (S1) has already been configured with a default VLAN 0001 associated with FDB ID 0001 as the PVID on all ports.

The following additional steps are required to configure the switch to solve this problem.

1.Define a new VLAN (VLAN ID 2) and filtering database (FDB ID 2) using the Device VLAN Configuration screen.

2.Create a Layer 2 rule to associate the protocol AppleTalk 809B and 80F3 to VLAN ID 2 (VID 2) using the VLAN Classification Configuration screen. This rule is assigned to all ports.

3.Enable the Dynamic Egress control on VLAN 2 using the Network Tools command (dynamic_egress enable 2).

With the above configuration, an AppleTalk frame received on any port will be classified into VLAN 2 (the AppleTalk VLAN), and the Port VLAN List of that port is updated to include VLAN 2.

For instance, if port 1 or 2 is connected to a new AppleTalk user, the AppleTalk frames received on that port are dynamically associated with VLAN 2 and VLAN 2 is added to the Port VLAN List of that port. The Port VLAN List contains a list of all VLANs whose frames can be transmitted out that port.

VLAN Operation and Network Applications 12-35