Specifications

Configuring VLANs
March 15, 2011 Page 17 of 20
Example Configuration
ThefollowingshowsanexampleN‐SeriesdeviceconfigurationusingthestepsinProcedure 4.
ThisexampleconfiguresapolicythatensuresthatIPtrafficreceivedonthespecifiedingressports
willbemappedtoVLAN2,whileallothertypesoftrafficwillbemappedtoVLAN3.
1. TwoVLANsare
created:VLAN2andVLAN3.
2. Ports1through5ontheGigabitEthernetmoduleinslot4areconfiguredasegressportsfor
theVLANswhileports8through10ontheGigabitEthernetmoduleinslot5areconfigured
asingressportsthatwilldothepolicyclassification.
3. Policy
profilenumber1iscreatedthatenablesPVIDoverrideanddefinesthedefaultbehavior
(classifytoVLAN3)ifnoneoftheclassificationrulescreatedfortheprofilearematched.
4. Administrativerulesarecreatedthatapplypolicyprofilenumber1toallframesreceivedon
theingressportsge.5.8through10.
5. Classificationrulesarecreatedforpolicyprofilenumber1thatassignIPframestoVLAN2.
TherulesidentifyIPframesbyusingtheetherprotocolparameter,whichclassifiesonthe
TypefieldintheheadersofLayer2EthernetIIframes,andtheprotocoldataof0x0800(IP
type),0x0806
(ARPtype),and0x 8035(RARPtype).
Switch1(su)->set vlan create 2, 3
Switch1(su)->set vlan egress 2 ge.4.1-2
Switch1(su)->set vlan egress 3 ge.4.3-5
Switch1(su)->set port ingress-filter ge.5.8-10 disable
Switch1(su)->set policy profile 1 name protocol_based_vlan pvid-status enable
pvid 3
Switch1(su)->set policy rule admin-profile port ge.5.8 port-string ge.5.8
admin-pid 1
Switch1(su)->set policy rule admin-profile port ge.5.9 port-string ge.5.9
admin-pid 1
Switch1(su)->set policy rule admin-profile port ge.5.10 port-string ge.5.10
admin-pid 1
Switch1(su)->set policy rule 1 ether 0x0800 mask 16 vlan 2
Switch1(su)->set policy rule 1 ether 0x0806 mask 16 vlan 2
Switch1(su)->set policy rule 1 ether 0x8035 mask 16 vlan 2
Monitoring VLANs
Table 2describestheshowcommandsthatdisplayinformationaboutVLANconfigurations.Refer
toyourdevice’sCLIdocumentationforadescriptionoftheoutputofeachshowcommand.
7. Configure the classification rules that will define
the protocol to filter on and the VLAN ID to which
matching frames will be assigned.
set policy rule profile-index
{protocol data [mask mask]} [vlan
vlan]
Procedure 4 Configuring Protocol-Based VLAN Classification (continued)
Step Task Command(s)
Table 2 Displaying VLAN Information
Task Command
Display all existing VLANs. show vlan