Specifications
Configuring VLANs
March 15, 2011 Page 10 of 20
Platform Specific Differences
Enterasys X-Series Platform Configuration
TheconfigurationofVLANsontheX‐Seriesplatformisverysimilartotheconfigurationof
VLANsontheN‐Series,S‐Series,K‐Series,stackable,andstandaloneswitchplatforms,withone
majorexception.Bydefault,physicalportsontheX‐Seriesareconfiguredtoroutetraffic,not
switchtraffic,which
isthecasefortheotherswitchplatforms.Therefore,bydefault,noports
resideontheegresslistforVLAN1unlesstheportisexplicitlyconfiguredtoswitchtrafficusing
thesetportmode<port‐string>switchedcommand,andexplicitlyconfiguredonVLAN1ʹs
egresslistusing
thesetvlanegress<vid><port‐string>commandasdescribedin“Configuring
StaticVLANs”onpage12.
VLAN Naming Convention for IP Interfaces
AVLANisidentifiedbyitsID,whichisanumberfrom1‐4094.OntheX‐Seriesdevices,aVLAN
entityconfiguredonaroutinginterfacecanbespecified inCLIcommandsintheformat:
vlan.instance.vlan_id,whereinstanceisthebridginginstance,andvlan_idistheVLANID
(1‐
4094).TheX‐Seriescurrentlysupportsonlyonebridginginstance.Therefore,instanceisalways1.
So,forexample,todisplayinformationaboutVLAN100,ineitherswitchorroutermodes,you
wouldenter:
show interface vlan.1.100
ThisconventionisdifferentfromotherEnterasysswitchplatforms,wheretheformatinthis
instancewouldbevlanvlan_id.
VLAN Constraints
VLANconstraintsisaN‐Series,S‐Series,andK‐Seriesplatformfeaturethatcontrolsthefiltering
databasetowhichVLANsareallowedtobelong.ThisfeatureisnotsupportedonX‐Series,
stackable,orstandaloneswitchplatforms.
Protected Ports
ProtectedPortsisafeaturesupportedonthestackableandstandaloneswitchplatformsthatis
usedtopreventportsfromforwardingtraffictoeachother,evenwhentheyareonthesame
VLAN.Portscanbedesignatedaseitherprotectedorunprotected.Portsareunprotectedby
default.Multiplegroupsofprotected
portsaresupported.
Portsthatareconfiguredtobeprotected:
• Cannotforwardtraffictootherprotectedportsinthesamegroup,regardlessofhavingthe
sameVLANmembership.
•Canforwardtraffictoportswhichareunprotected(notlistedinanygroup).
•Canforwardtraffictoprotectedportsinadifferentgroup,
iftheyareinthesameVLAN.
Unprotectedportscanforwardtraffictobothprotectedandunprotectedports.Aportmaybelong
toonlyonegroupofprotectedports.
Thisfeatureonlyappliestoportswithinaswitch.Itdoesnotapplyacrossmultipleswitchesina
network.Also,it
isnotsupportedonN‐Series,S‐Series,K‐Series,orX‐Seriesplatforms.