- Allied Telesis, Inc Switch Specification Manual

ManualsBrandsAllied Telesis ManualsSwitchLayer 3 Switches

Create A Secure Network With Allied Telesis Managed Layer 3 Switches 27

Appendix: Configuration scripts for MAC-forced forwarding example

Appendix: Configuration scripts for MAC-forced

forwarding example

In this example (from page 23), the edge switches can be any of the following switches:

z Rapier

6fi and Rapier 24i (but not Rapier 48i)

z AT-8724XL (but not AT-8748XL)

z AT-8824 and AT-8848

z AT-8624T/2M, AT-8624PoE, and AT-8648T/2SP

The access router is a Rapier 24i switch.

Edge switch

is directly connected to the access router.

set system name="Edge Switch 1"

create vlan=Voice vid=100 private

create vlan=Video vid=200 private

create vlan=Data vid=300 private

create vlan=Management vid=400 private

create vlan=EAN_Management vid=500 private

enable stp=default

set stp=default mode=rapid

add vlan=100 port=1-2,49-50 uplink frame=tagged

add vlan=100 port=15 frame=tagged

add vlan=200 port=1-2,49-50 uplink frame=tagged

add vlan=200 port=15 frame=tagged

add vlan=300 port=1-2,49-50 uplink frame=tagged

add vlan=300 port=15 frame=tagged

add vlan=400 port=1-2,49-50 uplink frame=tagged

add vlan=400 port=15 frame=tagged

add vlan=500 port=1-2,49-50 uplink frame=tagged

set stp=default port=3-48 edgeport=yes

enable dhcpsnooping

enable dhcpsnooping arpsecurity

enable dhcpsnooping option82

set dhcpsnooping port=1 trusted=yes

set dhcpsnooping port=2 trusted=yes

set dhcpsnooping port=49 trusted=yes

set dhcpsnooping port=50 trusted=yes

set dhcpsnooping port=15 maxleases=4

# Specify the static IP of the residential gateway

add dhcpsnooping binding=00-0d-da-00-0b-11 ip=172.16.4.201 interface=vlan400

port=15 router=172.16.4.254

enable macff int=vlan100

enable macff int=vlan200

enable macff int=vlan300

enable macff int=vlan400

enable macff int=vlan500

enable ip

add ip int=vlan500 ip=172.16.5.101 mask=255.255.255.0

delete lacp port=3-50

enable lacp