Specifications

Configuring VLANs
March 15, 2011 Page 14 of 20
Example Configuration
ThefollowingshowsanexampleS‐SeriesdeviceconfigurationusingthestepsinProcedure 1.In
thisexample,VLAN100iscreatedandnamedVLANRED.Portsge.1.2,1.3and1.4areassignedto
VLAN100andaddedtoitsegresslist.VLAN100isthenconfiguredasaroutinginterfacewith
an
IPaddressof120.20.20.24.
Switch1(su)->set vlan create 100
Switch1(su)->set vlan name 100 VLANRED
Switch1(su)->set port vlan ge.1.2-4 100
The PVID is used to classify untagged frames as they
ingress into a given port. Would you like to add the selected
port(s) to this VLAN's untagged egress list and remove them
from all other VLANs untagged egress list (y/n) [n]?
NOTE: Choosing 'y' will not remove the port(s) from previously
configured tagged egress lists.
y
Switch1(su)->configure terminal
Switch1(su-config)->interface vlan 100
Switch1(su-config-intf-vlan.0.100)->ip address 120.20.20.1/24
Switch1(su-config-intf-vlan.0.100)->no shutdown
IfyouwanttoconfigureaporttodropincomingframesthatdonothaveaVLANIDthatmatches
aVLANIDontheport’segresslist,usethesetportingress‐filtercommand.Forexample:
Switch1(su)->set port ingress-filter ge.1.2-4 enable
Ifyouwanttoconfigureaporttodiscardtaggedoruntaggedincomingframes,usethesetport
discardcommand.Forexample,toconfiguretheportstodroptaggedframesoningress:
Switch1(su)->set port discard ge.1.2-4 tagged
Creating a Secure Management VLAN
IfyouareconfiguringanEnterasysdeviceformultipleVLANs,itmaybedesirabletoconfigurea
management‐onlyVLAN.ThisallowsastationconnectedtothemanagementVLANtomanage
thedevice.Italsomakesmanagementsecurebypreventingconfigurationthroughportsassigned
tootherVLANs.
11c. N-Series/S-series/K-Series configuration: configure terminal
interface vlan vlan_id
ip address ip-address ip-mask
no shutdown
Note: Each VLAN interface must be configured for routing separately using the interface
command shown above. To end configuration on one interface before configuring another, type
exit at the command prompt. Enabling interface configuration mode is required for completing
interface-specific configuration tasks.
Procedure 1 Static VLAN Configuration (continued)
Step Task Command(s)
Note: Refer to Procedure 1to determine which platform-specific commands may apply to your
device when following this example configuration.