User guide
17
is tagged on egress
#switch --set-port-default-vid 1:111 # If untagged frames ingress on port 1,
place these into VLAN 111 (first VLAN)
#
# VLAN SETTINGS FOR LAN PORT 2
switch --set-port-802dot1q-mode 2:3 # LAN port 2 is secure mode, allows tagged
frames only
switch --add-vtu-entry 211:3:1:3:1:1:2:0 # puts WAN and LAN2 into vid 211, LAN2
is tagged on egress
switch --add-vtu-entry 221:3:1:3:1:1:2:0 # puts WAN and LAN2 into vid 221, LAN2
is tagged on egress
switch --add-vtu-entry 231:3:1:3:1:1:2:0 # puts WAN and LAN2 into vid 231, LAN2
is tagged on egress
switch --add-vtu-entry 241:3:1:3:1:1:2:0 # puts WAN and LAN2 into vid 241, LAN2
is tagged on egress
#switch --set-port-default-vid 2:211 # If untagged frames ingress on port 2,
place these into VLAN 211 (first VLAN)
#
# VLAN SETTINGS FOR LAN PORT 3
switch --set-port-802dot1q-mode 3:3 # LAN port 3 is secure mode, allows tagged
frames only
switch --add-vtu-entry 311:3:1:1:3:1:2:0 # puts WAN and LAN3 into vid 311, LAN3
is tagged on egress
switch --add-vtu-entry 321:3:1:1:3:1:2:0 # puts WAN and LAN3 into vid 321, LAN3
is tagged on egress
switch --add-vtu-entry 331:3:1:1:3:1:2:0 # puts WAN and LAN3 into vid 331, LAN3
is tagged on egress
switch --add-vtu-entry 341:3:1:1:3:1:2:0 # puts WAN and LAN3 into vid 341, LAN3
is tagged on egress
#switch --set-port-default-vid 3:311 # If untagged frames ingress on port 3,
place these into VLAN 311 (first VLAN)
#
# VLAN SETTINGS FOR LAN PORT 4, DUMMY VLAN
switch --set-port-802dot1q-mode 4:3 # LAN port 4 is secure mode, allows tagged
frames only
# VLAN SETTINGS FOR LAN PORT 6, applicable to 7/8 port models only
switch --set-port-802dot1q-mode-ext 2:3 # LAN port 6 (Ext 2) is secure mode,
allows tagged frames only
switch --add-vtu-entry 311:3:1:1:1:1:2:1:3:1:1:0 # puts WAN and LAN3 into vid
311, LAN6 is tagged on egress
switch --add-vtu-entry 321:3:1:1:1:1:2:1:3:1:1:0 # puts WAN and LAN3 into vid
321, LAN6 is tagged on egress
switch --add-vtu-entry 331:3:1:1:1:1:2:1:3:1:1:0 # puts WAN and LAN3 into vid
331, LAN6 is tagged on egress
switch --add-vtu-entry 341:3:1:1:1:1:2:1:3:1:1:0 # puts WAN and LAN3 into vid
341, LAN6 is tagged on egress
#switch --set-port-default-vid-ext 2:311 # If untagged frames ingress on LAN
port 6/port Ext 2, place these into VLAN 311 (first VLAN)
#
Also a combination of tagged/untagged frames that ingress a port is possible. The following example has
VLAN211andVLAN221denedforWANandLANport1.VLAN211willbetaggedegressonWANandLAN
port 1, whereas VLAN 221 will be tagged egress on WAN and untagged egress on LAN port 1. It is expected
that VLAN 211 is tagged ingress on both WAN and LAN port 1, whereas VLAN 221 is tagged ingress on WAN
and untagged ingress on LAN port 1. All other ports are not member of the VLANs. A management VLAN
951isdened(untagged),whichenablescommunicationbetweensystemoperatorandCPEformanage-
ment purposes (untagged).