Enterasys Networks DFE-Gold Series Port Assignment Scheme, Port String Syntax Used in the CLI, Preparing for VLAN Configuration, About PVIDs and Policy Classification to a VLAN, Creating a Secure Management VLAN

VLAN Configuration Summary
7-2 802.1Q VLAN Configuration
Port Assignment Scheme
Forinformationonthisdevice’sportassignmentscheme,referto“PortStringSyntaxUsedinthe
CLI”onpage 4‐2.
Port String Syntax Used in the CLI
ForinformationonhowtodesignateportnumbersintheCLIsyntax,referto“PortStringSyntax
UsedintheCLI”onpage 4‐2.
Preparing for VLAN Configuration
AlittleforethoughtandplanningisessentialtoagoodVLANimplementation.Beforeattempting
toconfigureasingledeviceforVLANoperation,considerthefollowing:
•HowmanyVLANswillberequired?
•Whatstationswillbelongtothem?
•Whatportsareconnectedtothosestations?
•WhatportswillbeconfiguredasGVRP‐awareports?
ItisalsohelpfultosketchoutadiagramofyourVLANstrategy.
About PVIDs and Policy Classification to a VLAN
PortVLANIDs(PVIDs)assignVLANIDstountaggedframesononeormoreports.Usingtheset
portvlancommandasdescribedin“setportvlan”onpage 7‐10,youcan,forexample,assign
ports1,5,8,and9toVLAN3.UntaggedframesreceivedonthoseportswillbeassignedtoVLAN
3.(Bydefault,allportsaremembersofVLANID1,thedefaultVLAN.)
PolicyclassificationtoaVLAN,asdescribedinChapter 8,“setpolicyrule”onpage 8‐13,takes
precedenceoverPVIDassignmentif:
•PolicyclassificationisconfiguredtoaVLANasdescribedin“setpolicyrule”onpage 8‐13,
and
•PVIDoverridehasbeenenabledforapolicyprofile,andassignedtoport(s)associatedwith
thePVIDasdescribedin“setpolicyprofile”onpage 8‐3.
Formoreinformationaboutconfiguringuserpolicyprofiles,includingPVIDoverride,protocol‐
basedpolicyclassificationaVLANorClassofService,andassigningportstopolicyprofiles,refer
toChapter 8.
Creating a Secure Management VLAN
IftheMatrixSeriesdeviceistobeconfiguredformultipleVLAN’s,itmaybedesirableto
configureamanagement‐onlyVLAN.ThisallowsastationconnectedtothemanagementVLAN
tomanagethedevice.Italsomakesmanagementsecurebypreventingconfigurationviaports
assignedtootherVLANs.
TocreateasecuremanagementVLAN,youmust:
1. CreateanewVLAN.(“setvlan”onpage 7‐6)
2. SetthePVIDforthehostportandthedesiredswitchporttotheVLANcreatedinStep1.(“set
portvlan”onpage 7‐10)