Specifications

Configuring VLANs
March 15, 2011 Page 16 of 20
Configuring Protocol-Based VLAN Classification
Protocol‐basedVLANscanbeconfiguredusingthepolicyclassificationCLIcommands,asshown
inthissection,orbyusingNetSightPolicyManager.
Procedure 4describeshowtodefineprotocol‐basedframefilteringpoliciestoassignframesto
particularVLANs.RefertoyourEnterasyspolicyconfiguration andCLIdocumentationformore
information.
4. Optionally, set the GARP join, leave, and
leaveall timer values. Each timer value is in
centiseconds.
set garp timer {[join timer-value]
[leave timer-value]
[leaveall timer-value]} port-string
Caution: The setting of GARP timers is critical and should only be changed by personnel
familiar with 802.1Q standards.
Procedure 3 Dynamic VLAN Configuration (continued)
Step Task Command(s)
Note: Depending on your Enterasys switching device, your options for configuring policy
classification may differ from the examples provided in this section. Refer to your device’s
documentation for a list of CLI commands and functions supported.
Procedure 4 Configuring Protocol-Based VLAN Classification
Step Task Command(s)
1. (Applies to X-Series only.) Configure the ports to
be used as switch ports.
set port mode port-string switched
2. Create the VLANs to which frames will be
assigned by the policy. Valid values are 1–4094.
set vlan create vlan-id
3. Configure VLAN egress, which determines
which ports a frame belonging to the VLAN may
be forwarded out on.
The default setting, tagged, allows the port to
transmit frames for a particular VLAN.
set vlan egress vlan-id port-string
[forbidden | tagged | untagged]
4. Disable ingress filtering on the ingress ports on
which the policy will be applied.
set port ingress-filter port-string
disable
5. Create the policy profile that enables PVID
override. This function allows a policy rule
classifying a frame to a VLAN to override PVID
assignment configured with the set port vlan
command.
When none of its associated classification rules
match, the configuration of the policy profile
itself will determine how frames are handled by
default. In this case, the default VLAN is
specified with the pvid pvid parameter.
set policy profile profile-index
[name name] [pvid-status {enable |
disable}] [pvid pvid]
6. Configure the administrative rules that will
assign the policy profile to all frames received on
the desired ingress ports.
set policy rule admin-profile port
port-string [port-string port-
string] [admin-pid admin-pid]