VLAN REGISTRATION OVER GARP

CHAPTER 11: VLAN REGISTRATION OVER GARP

Send VLAN advertisements, and also receive advertisements for VLANs on other ports and dynamically join those VLANs

Send VLAN advertisements, but ignore advertisements received from other ports

Avoid GVRP participation by not sending advertisements and dropping any advertisements received from other devices

Table 11–1: Port settings for GVRP operations

Unknown

Operations

VLAN mode

 

 

 

Learn

Enables the port to dynamically join any VLAN

 

for which it receives and advertisement, and

 

allows the port to forward the advertisement it

 

receives.

 

 

Block

Prevents the port from dynamically joining a

 

VLAN that is not statically configured on the

 

switch. The port will still forward advertisements

 

that were received by the switch on other ports.

 

Block should typically be used on ports in

 

insecure networks where there is exposure to

 

attack - such as ports where intruders can

 

connect.

 

 

Disable

Causes the port to ignore and drop all the

 

advertisements it receives from any source.

 

 

The show-vlancommand displays a switch's current GVRP configuration, including the unknown VLANs.

show-vlan

A port must be enabled and configured to learn for it to be assigned to the dynamic VLAN. To send advertisements, one or more tagged or untagged static VLANs must be configured on one (or more) switches with GVRP enabled. The ML1200 software allows a dynamic VLAN to be converted to a static VLAN with the static command.

static vlan=<VID>

The show vlan type=tag command will display VID in case the VID is not known.

Example 11-1illustrates how to convert a dynamic VLAN into a static VLAN.

As the following table indicates, a port that has a tagged or untagged static VLAN has the option for both generating advertisements and dynamically joining other VLANs.

11–4

MULTILINK ML1200 MANAGED FIELD SWITCH – INSTRUCTION MANUAL

Page 190
Image 190
GE ML1200 instruction manual Port settings for Gvrp operations, Show-vlan, Static vlan=VID