This section describes the commands you use to configure VLAN settings.
vlan database
This command gives you access to the VLAN Config mode, which allows you to configure VLAN characteristics.
Format: vlan database
Mode: Privileged EXEC
network mgmt_vlan
This command configures the Management VLAN ID.
Default: 1
Format: network mgmt_vlan <1-4093>
Mode: Privileged EXEC
no network mgmt_vlan
This command sets the Management VLAN ID to the default.
Format: no network mgmt_vlan
Mode: Privileged EXEC
vlan
This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN). VLAN range is 2-4093.
Format: vlan <2-4093>
Mode: VLAN Config
no vlan
This command deletes an existing VLAN. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN). The VLAN range is 2-4093.
Format: no vlan <2-4093>
Mode: VLAN Config
vlan acceptframe
This command sets the frame acceptance mode per interface. For VLAN Only mode, untagged frames or priority frames received on this interface are discarded. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification.
Default: all
Format: vlan acceptframe {vlanonly | all}
Mode: Interface Config
no vlan acceptframe
This command resets the frame acceptance mode for the interface to the default value.
Format: no vlan acceptframe
Mode: Interface Config
vlan ingressfilter
This command enables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN.
Default: disabled
Format: vlan ingressfilter
Mode: Interface Config
no vlan ingressfilter
This command disables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN.
Format: no vlan ingressfilter
Mode: Interface Config
vlan makestatic
This command changes a dynamically created VLAN (created by GVRP registration) to a static VLAN (one that is permanently configured and defined). The ID is a valid VLAN identification number. VLAN range is <2-4093>.
Format: vlan makestatic <2-4093>
Mode: VLAN Config
vlan name
This command changes the name of a VLAN. The name is an alphanumeric string of up to 32 characters, and the ID is a valid VLAN identification number. ID range is 1-4093.
Default: VLAN ID 1 - default; other VLANS - blank string
Format: vlan name <2-4093> <name>
Mode: VLAN Config
no vlan name
This command sets the name of a VLAN to a blank string.
Format: no vlan name <2-4093>
Mode: VLAN Config
vlan participation
This command configures the degree of participation for a specific interface in a VLAN. The ID is a valid VLAN identification number, and the interface is a valid interface number.
Format: vlan participation {exclude | include | auto} <1-4093>
Mode: Interface Config
Participation options are:
include: The interface is always a member of this VLAN. This is equivalent to registration fixed.
exclude: The interface is never a member of this VLAN. This is equivalent to registration forbidden.
auto: The interface is dynamically registered in this VLAN by GVRP and will not participate in this VLAN unless a join request is received on this interface. This is equivalent to registration normal.
vlan participation all
This command configures the degree of participation for all interfaces in a VLAN. The ID is a valid VLAN identification number.
Format: vlan participation all {exclude | include | auto} <1-4093>
Mode: Global Config
Participation options are:
include: The interface is always a member of this VLAN. This is equivalent to registration fixed.
exclude: The interface is never a member of this VLAN. This is equivalent to registration forbidden.
vlan port acceptframe all
This command sets the frame acceptance mode for all interfaces. The modes defined as follows:
VLAN Only mode: Untagged frames or priority frames received on this interface are discarded.
Admit All mode: Untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port.
With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification.
Default: all
Format: vlan port acceptframe all {vlanonly | all}
Mode: Global Config
no vlan port acceptframe all
This command sets the frame acceptance mode for all interfaces to Admit All. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification.
Format: no vlan port acceptframe all
Mode: Global Config
vlan port ingressfilter all
This command enables ingress filtering for all ports. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN.
Default: disabled
Format: vlan port ingressfilter all
Mode: Global Config
no vlan port ingressfilter all
This command disables ingress filtering for all ports. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN.
Format: no vlan port ingressfilter all
Mode: Global Config
vlan port pvid all
This command changes the VLAN ID for all interfaces.
Default: 1
Format: vlan port pvid all <1-4093>
Mode: Global Config
no vlan port pvid all
This command sets the VLAN ID for all interfaces to 1.
Format: no vlan port pvid all
Mode: Global Config
vlan port tagging all
This command configures the tagging behavior for all interfaces in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number.
Format: vlan port tagging all <1-4093>
Mode: Global Config
no vlan port tagging all
This command configures the tagging behavior for all interfaces in a VLAN to disabled. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number.
Format: no vlan port tagging all
Mode: Global Config
vlan protocol group
This command adds protocol-based VLAN groups to the system. The <groupid> is a unique number from 1-128 that is used to identify the group in subsequent commands.
Format: vlan protocol group <groupid>
Mode: Global Config
vlan protocol group name
This command assigns a name to a protocol-based VLAN groups. The <groupname> variable can be a character string of 0 to 16 characters.
Format: vlan protocol group name <groupid><groupname>
Mode: Global Config
no vlan protocol group name
This command removes the name from the group identified by<groupid> .
Format: no vlan protocol group name <groupid>
Mode: Global Config
vlan protocol group add protocol
This command adds the <protocol> to the protocol-based VLAN identified by <groupid>. A group may have more than one protocol associated with it. Each interface and protocol combination can only be associated with one group. If adding a protocol to a group causes any conflicts with interfaces currently associated with the group, this command fails and the protocol is not added to the group. The possible values for protocol are The possible values for protocol-list includes the keywords<ip>,<arp>and<ipx> and hexadecimal or decimal values ranging from 0x0600 (1536) to 0xFFFF (65535). The protocol list can accept up to 16 protocols separated by a comma.
Default: none
Format: vlan protocol group add protocol <groupid> <ethertype><protocol-list>
Mode: Global Config
no vlan protocol group add protocol
This command removes the protocols specified in the<protocol-list>from this protocol-based VLAN group that is identified by this <group-id>.
Format: no vlan protocol group add protocol <groupid> <ethertype><protocol-list>
Mode: Global Config
protocol group
This command attaches a <vlanid> to the protocol-based VLAN identified by <groupid>. A group may only be associated with one VLAN at a time, however the VLAN association can be changed.
Default: none
Format: protocol group<groupid><vlanid>
Mode: VLAN Config
no protocol group
This command removes the <vlanid> from this protocol-based VLAN group that is identified by this<groupid>.
Format: no protocol group <groupid> < vlanid>
Mode: VLAN Config
protocol vlan group
This command adds a physical interface or a range of interfaces to the protocol-based VLAN identified by <groupid>. You can associate multiple interfaces with a group, but you can only associate each interface and protocol combination with one group. If adding an interface to a group causes any conflicts with protocols currently associated with the group, this command fails and the interface(s) are not added to the group.
Default: none
Format: protocol vlan group <groupid>
Mode: Interface Config
no protocol vlan group
This command removes the interface from this protocol-based VLAN group that is identified.
Format: no protocol vlan group <groupid>
Mode: Interface Config
protocol vlan group all
This command adds all physical interfaces to the protocol-based VLAN identified by <groupid>. You can associate multiple interfaces with a group, but you can only associate each interface and protocol combination with one group. If adding an interface to a group causes any conflicts with protocols currently associated with the group, this command will fail and the interface(s) will not be added to the group.
Default: none
Format: protocol vlan group all <groupid>
Mode: Global Config
no protocol vlan group all
This command removes all interfaces from this protocol-based VLAN group that is identified by this <groupid>
Format: no protocol vlan group all <groupid>
Mode: Global Config
show port protocol
This command displays the Protocol-Based VLAN information for either the entire system, or for the indicated group.
Format: show port protocol {<groupid> | all}
Mode: Privileged EXEC
The display parameters for above command are:
Group Name: The group name of an entry in the Protocol-based VLAN table.
Group ID: The group identifier of the protocol group.
VLAN: The VLAN associated with this Protocol Group.
Protocol(s): The type of protocol(s) for this group.
Interface(s): Lists the <unit/slot/port> interface(s) that are associated with this Protocol Group.
vlan pvid
This command changes the VLAN ID per interface.
Default: 1
Format: vlan pvid <1-4093>
Mode: Interface Config
no vlan pvid
This command sets the VLAN ID per interface to 1.
Format: no vlan pvid
Mode: Interface Config
vlan tagging
This command configures the tagging behavior for a specific interface in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number.
Format: vlan tagging <1-4093>
Mode: Interface Config
no vlan tagging
This command configures the tagging behavior for a specific interface in a VLAN to disabled. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number.
Format: no vlan tagging <1-4093
Mode: Interface Config
vlan association subnet
This command associates a VLAN to a specific IP-subnet.
Format: vlan association subnet <ipaddr> <netmask> <vlanid>
Mode: VLAN Config
no vlan association subnet
This command removes association of a specific IP-subnet to a VLAN.
Format: no vlan association subnet <ipaddr> <netmask>
Mode: VLAN Config
vlan association mac
This command associates a MAC address to a VLAN.
Format: vlan association mac <macaddr> <vlanid>
Mode: VLAN database
no vlan association mac
This command removes the association of a MAC address to a VLAN.
Format: no vlan association mac <macaddr> <vlanid>
Mode: VLAN database
show vlan
This command displays detailed information, including interface information, for a specific VLAN. The ID is a valid VLAN identification number.
Format: show vlan <vlanid>
Modes:
Privileged EXEC
User EXEC
The display parameters for above command are:
VLAN ID: There is a VLAN Identifier (VID) associated with each VLAN. The range of the VLAN ID is 1 to 4093.
VLAN Name: A string associated with this VLAN as a convenience. It can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always has a name of “Default.” This field is optional.
VLAN Type: Type of VLAN, which can be Default (VLAN ID = 1) or static (one that is configured and permanently defined).
Interface: Valid slot and port number separated by a forward slash.
Current: The degree of participation of this port in this VLAN. The permissible values are:
Include: This port is always a member of this VLAN. This is equivalent to registration fixed in the IEEE 802.1Q standard.
Exclude: This port is never a member of this VLAN. This is equivalent to registration forbidden in the IEEE 802.1Q standard.
Autodetect: To allow the port to be dynamically registered in this VLAN via GVRP. The port will not participate in this VLAN unless a join request is received on this port. This is equivalent to registration normal in the IEEE 802.1Q standard.
Configured: The configured degree of participation of this port in this VLAN. The permissible values are:
Include: This port is always a member of this VLAN. This is equivalent to registration fixed in the IEEE 802.1Q standard.
Exclude: This port is never a member of this VLAN. This is equivalent to registration forbidden in the IEEE 802.1Q standard.
Autodetect: To allow the port to be dynamically registered in this VLAN via GVRP. The port will not participate in this VLAN unless a join request is received on this port. This is equivalent to registration normal in the IEEE 802.1Q standard.
Tagging: The tagging behavior for this port in this VLAN.
Tagged: Transmit traffic for this VLAN as tagged frames.
Untagged: Transmit traffic for this VLAN as untagged frames.
show vlan internal usage
This command displays information about the VLAN ID allocation on the switch.
Format: show vlan internal usage
Mode:
Privileged EXEC
User EXEC
The display parameters for above command are:
Base VLAN ID: Identifies the base VLAN ID for Internal allocation of VLANs to the routing interface.
Allocation policy: Identifies whether the system allocates VLAN IDs in ascending or descending order.
show vlan brief
This command displays a list of all configured VLANs.
Format: show vlan brief
Modes:
Privileged EXEC
User EXEC
VLAN ID: There is a VLAN Identifier (vlanid) associated with each VLAN. The range of the VLAN ID is 1 to 3965.
VLAN Name: A string associated with this VLAN as a convenience. It can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always has a name of “Default.” This field is optional.
VLAN Type: Type of VLAN, which can be Default (VLAN ID = 1) or static (one that is configured and permanently defined) or a Dynamic (one that is created by GVRP registration).
Interface: List of interfaces included in paritcipating for a particular VlanID.
show vlan port
This command displays VLAN port information.
Format: show vlan port {<unit/slot/port> | all}
Modes:
Privileged EXEC
User EXEC
The display parameters for above command are:
Interface: Valid slot and port number separated by a forward slash.
Port VLAN ID: The VLAN ID that this port will assign to untagged frames or priority tagged frames received on this port. The value must be for an existing VLAN. The factory default is 1.
Acceptable Frame Types: The types of frames that may be received on this port. The options are 'VLAN only' and 'Admit All'. When set to 'VLAN only', untagged frames or priority tagged frames received on this port are discarded. When set to 'Admit All', untagged frames or priority tagged frames received on this port are accepted and assigned the value of the Port VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance to the 802.1Q VLAN specification.
Ingress Filtering: May be enabled or disabled. When enabled, the frame is discarded if this port is not a member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is identified by the VLAN ID in the tag. In an untagged frame, the VLAN is the Port VLAN ID specified for the port that received this frame. When disabled, all frames are forwarded in accordance with the 802.1Q VLAN bridge specification. The factory default is disabled.
GVRP: May be enabled or disabled.
Default Priority: The 802.1p priority assigned to tagged packets arriving on the port.
show vlan association subnet
This command displays the VLAN associated with a specific configured IP-Address and net mask. If no IP address and net mask are specified, the VLAN associations of all the configured IP-subnets are displayed.
Format: show vlan association subnet [<ipaddr> <netmask>]
Mode: Privileged EXEC
The display parameters for above command are:
IP Address: The IP address assigned to each interface.
Net Mask: The subnet mask.
VLAN ID: There is a VLAN Identifier (VID) associated with each VLAN.
show vlan association mac
This command displays the VLAN associated with a specific configured MAC address. If no MAC address is specified, the VLAN associations of all the configured MAC addresses are displayed.
Format: show vlan association mac [<macaddr>]
Mode: Privileged EXEC
The display parameters for above command are:
Mac Address: A MAC address for which the switch has forwarding and or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes.
VLAN ID: There is a VLAN Identifier (VID) associated with each VLAN.
