User Guide

OmniAccess SafeGuard OS Administration Guide
142
Chapter 5: Setting Up SafeGuard Switches
protocol vlan group {all} groupname
The following example adds all physical interfaces to the protocol VLAN.
(SafeGuardOS) #configure terminal
(SafeGuardOS) (config) #protocol vlan group all ipgroup
(SafeGuardOS) (config) #exit
Configuring MAC-Based VLANs
A MAC-based VLAN is a VLAN of specific end point devices. These VLANs are useful
for workstations that move frequently because they are not tied to a port. MAC-based
VLANs are defined globally; all traffic from the device with the matching MAC address
is funneled into the VLAN.
To create a MAC-based VLAN, follow these steps described in the following sections:
1 Creating the VLAN and Assigning a VLAN ID on page 134.
2 Assigning a Name to the VLAN on page 135.
3 Assigning the Egress Port Membership and Optional Tagging for All Ports on page 140.
4 Associating the VLAN to a MAC address on page 142
5 Assigning an IP Address to the VLAN on page 137
6 Setting Frame Acceptance on page 138
7 Enabling Ingress Filtering on page 138
8 Verify the configuration using the show vlan brief or show running-config
commands. This step is described in Verifying the VLAN Configuration on page 145.
Associating the VLAN to a MAC address
To associate the VLAN to a MAC address, use the vlan association command in VLAN
database submode of Global Configuration. The no version of the command removes the
association.
vlan association [mac macaddr] vlanid
Syntax Description all Specifies to all physical interfaces to the
protocol VLAN.
groupname Specifies to associate the VLAN with this VLAN ID
to the group name. Valid entries are from 1 to
128 characters.