User guide

16
explanation of feature settings
VLAN settings
In SECURE mode, the VID for the given frame must be contained in the VTU, and the Ingress port must be
a member of the VLAN or the frame will be discarded.
In CHECK mode, the VID for the given frame must be contained in the VTU or the frame will be discarded
(the frame will not be discarded if the Ingress port is not a memeber of the VLAN).
In FALLBACK mode, Frames are not discarded if their VID’s are not contained in the VTU. If the frame’s
VID is contained in the VTU, the frame is allowed to exit only those ports that are members of the
frame’s VLAN; otherwise the switch ‘falls back’ into Port Based VLAN mode for the frame.
Egress Tagging for a member port of a Vlan has the following three choices:
1. Unmodied
2. Untagged
3. Tagged
ThedefaultcongurationdenesnoVLAN.
The following ports can be included in the VLAN setup:
• WANport=port<0>
• LANport1=port<1>
• LANport2=port<2>
• LANport3=port<3>
• LANport4=port<4>
• CPUport=port<5>,thisistheinterfacebetweentheinternalswitchandCPUengine(management
and VoIP processor, if applicable)
For 7/8 port models:
• LANport5=portExt<1>
• LANport6=portExt<2>
• LANport7=portExt<3>
• LANport8=portExt<4>
 EachLANportcanbesetupuptotaggedtrafcthereingresstheportwithagivenvlanidentier.
 WhenthetrafcegresstheLANportthevlantagisremoved.
The syntax for the command is:
# VLAN SETTINGS FOR WAN PORT, WAN PORT WILL BE MEMBER OF ALL VLANS, SEE SET-
TINGS UNDER EACH VLAN DEFINITION
switch --set-port-802dot1q-mode 0:3 # WAN port is in secure mode, allows tagged
frames only
switch --add-vtu-entry 500:3:1:1:1:1:2:2:0 # puts WAN and CPU into vid 500,
THIS IS MANAGEMENT VLAN
# For 7/8 port models
switch --add-vtu-entry-ext 500:3:1:1:1:1:2::1:1:1:12:0 # puts WAN and CPU into
vid 500, THIS IS MANAGEMENT VLAN
#
# VLAN SETTINGS FOR LAN PORT 1
switch --set-port-802dot1q-mode 1:3 # LAN port 1 is secure mode, allows tagged
frames only
switch --add-vtu-entry 111:3:3:1:1:1:2:0 # puts WAN and LAN1 into vid 111, LAN1
is tagged on egress
switch --add-vtu-entry 121:3:3:1:1:1:2:0 # puts WAN and LAN1 into vid 121, LAN1
is tagged on egress
switch --add-vtu-entry 131:3:3:1:1:1:2:0 # puts WAN and LAN1 into vid 131, LAN1
is tagged on egress
switch --add-vtu-entry 141:3:3:1:1:1:2:0 # puts WAN and LAN1 into vid 141, LAN1