User Manual
Page 26
... VLAN Interface Configuration 599 Voice VLAN 601 Configuring VLANs (CLI 602 Creating a VLAN 602 Configuring a Port in Access Mode 603 Configuring a Port in General Mode 604 Configuring a Port in Trunk Mode 605 Configuring VLAN Settings for a LAG 607 Configuring Double VLAN Tagging 608 Configuring MAC-Based VLANs 609 Configuring IP-Based VLANs 610 Configuring a Protocol-Based VLAN 610 Configuring GVRP 612 Configuring Voice VLANs 614 VLAN Configuration Examples 615 Configuring VLANs Using Dell OpenManage Administrator 618 Configure the VLANs...
... VLAN Interface Configuration 599 Voice VLAN 601 Configuring VLANs (CLI 602 Creating a VLAN 602 Configuring a Port in Access Mode 603 Configuring a Port in General Mode 604 Configuring a Port in Trunk Mode 605 Configuring VLAN Settings for a LAG 607 Configuring Double VLAN Tagging 608 Configuring MAC-Based VLANs 609 Configuring IP-Based VLANs 610 Configuring a Protocol-Based VLAN 610 Configuring GVRP 612 Configuring Voice VLANs 614 VLAN Configuration Examples 615 Configuring VLANs Using Dell OpenManage Administrator 618 Configure the VLANs...
User Manual
Page 32
... 789 DHCP Snooping Configuration 789 DHCP Snooping Interface Configuration . . . . . 790 DHCP Snooping VLAN Configuration 792 DHCP Snooping Persistent Configuration . . . . 794 DHCP Snooping Static Bindings Configuration 795 DHCP Snooping Dynamic Bindings Summary 797 DHCP Snooping Statistics 798 IPSG Interface Configuration 799 IPSG Binding Configuration 800 IPSG Binding Summary 801 DAI Global Configuration 802 DAI Interface Configuration 803 DAI VLAN Configuration 805 DAI ACL...
... 789 DHCP Snooping Configuration 789 DHCP Snooping Interface Configuration . . . . . 790 DHCP Snooping VLAN Configuration 792 DHCP Snooping Persistent Configuration . . . . 794 DHCP Snooping Static Bindings Configuration 795 DHCP Snooping Dynamic Bindings Summary 797 DHCP Snooping Statistics 798 IPSG Interface Configuration 799 IPSG Binding Configuration 800 IPSG Binding Summary 801 DAI Global Configuration 802 DAI Interface Configuration 803 DAI VLAN Configuration 805 DAI ACL...
User Manual
Page 37
... (Web 914 DHCP Relay Global Configuration 914 DHCP Relay Interface Configuration 915 DHCP Relay Interface Statistics 917 DHCP Relay VLAN Configuration 918 DHCP Relay Agent Configuration 919 IP Helper Global Configuration 920 IP Helper Interface Configuration 922 IP Helper Statistics 923 Configuring L2 and L3 Relay Features (CLI 925 Configuring L2 DHCP Relay 925 Configuring L3 Relay (IP Helper) Settings...
... (Web 914 DHCP Relay Global Configuration 914 DHCP Relay Interface Configuration 915 DHCP Relay Interface Statistics 917 DHCP Relay VLAN Configuration 918 DHCP Relay Agent Configuration 919 IP Helper Global Configuration 920 IP Helper Interface Configuration 922 IP Helper Statistics 923 Configuring L2 and L3 Relay Features (CLI 925 Configuring L2 DHCP Relay 925 Configuring L3 Relay (IP Helper) Settings...
User Manual
Page 105
... tests, and listing system information. • Privileged EXEC - Commands in this mode create and remove VLANs and configure IGMP/MLD Snooping parameters for a specific interface or range of interfaces. • VLAN Configuration - Commands in this mode configure the settings for VLANs. The CLI includes several additional command modes. In each mode. Commands in this mode permit...
... tests, and listing system information. • Privileged EXEC - Commands in this mode create and remove VLANs and configure IGMP/MLD Snooping parameters for a specific interface or range of interfaces. • VLAN Configuration - Commands in this mode configure the settings for VLANs. The CLI includes several additional command modes. In each mode. Commands in this mode permit...
User Manual
Page 122
.... 5 Click Apply. NOTE: You do not need to configure the default gateway for the switch. The Default VLAN uses the switch default gateway as its default gateway. For information about VLAN routing interfaces, see "Configuring Routing Interfaces" on the page. Route Configuration (Default VLAN) Configuring a Default Gateway for the configuration method, specify the IP Address and Subnet Mask...
.... 5 Click Apply. NOTE: You do not need to configure the default gateway for the switch. The Default VLAN uses the switch default gateway as its default gateway. For information about VLAN routing interfaces, see "Configuring Routing Interfaces" on the page. Route Configuration (Default VLAN) Configuring a Default Gateway for the configuration method, specify the IP Address and Subnet Mask...
User Manual
Page 510
... Internet, with no ability to the switch. Client devices that 510 Configuring 802.1X and Port-Based Security Guest VLAN Supplicant mode can get assigned to the Guest VLAN configured on the switch and the RADIUSassigned VLAN does not exist, then the assigned VLAN is configured for clients to hosts on the internal LAN. This gives flexibility...
... Internet, with no ability to the switch. Client devices that 510 Configuring 802.1X and Port-Based Security Guest VLAN Supplicant mode can get assigned to the Guest VLAN configured on the switch and the RADIUSassigned VLAN does not exist, then the assigned VLAN is configured for clients to hosts on the internal LAN. This gives flexibility...
User Manual
Page 531
... entry in this port does not need to authenticate clients. The administrator must configure the following examples: • Configuring 802.1X Authentication • Configuring MAC-Based Authentication Mode • Allowing RADIUS-Assigned VLANs and a Guest VLAN • Configuring Authentication Server Filter Assignments Configuring 802.1X Authentication The network in the client database that the device connected to...
... entry in this port does not need to authenticate clients. The administrator must configure the following examples: • Configuring 802.1X Authentication • Configuring MAC-Based Authentication Mode • Allowing RADIUS-Assigned VLANs and a Guest VLAN • Configuring Authentication Server Filter Assignments Configuring 802.1X Authentication The network in the client database that the device connected to...
User Manual
Page 571
... as department or project membership. All ports in the same broadcast domain. Like a bridge, a VLAN switch forwards traffic based on a PowerConnect 7000 Series switch are a greater security risk since all hosts receive all switchports on the Layer 2...Virtual Local Area Networks (VLANs) allow you to divide a broadcast domain into logical segments, which is slow. The topics covered in this chapter include: • VLAN Overview • Default VLAN Behavior • Configuring VLANs (Web) • Configuring VLANs (CLI) • VLAN Configuration Examples VLAN Overview By default, all...
... as department or project membership. All ports in the same broadcast domain. Like a bridge, a VLAN switch forwards traffic based on a PowerConnect 7000 Series switch are a greater security risk since all hosts receive all switchports on the Layer 2...Virtual Local Area Networks (VLANs) allow you to divide a broadcast domain into logical segments, which is slow. The topics covered in this chapter include: • VLAN Overview • Default VLAN Behavior • Configuring VLANs (Web) • Configuring VLANs (CLI) • VLAN Configuration Examples VLAN Overview By default, all...
User Manual
Page 573
Simple VLAN Topology Engineering VLAN 100 Router Switch Payroll VLAN 300 Tech Pubs VLAN 200 In this example, each port is manually configured so that the end station attached to the port is a member of the packet transmitted by the end station Configuring VLANs 573 Figure 21-1. PowerConnect 7000 Series switches also support VLAN assignment based on any of the following criteria: • MAC address of the end station • IP subnet of the end station • Protocol of the VLAN configured for this network is port-based or static. The VLAN membership for the port.
Simple VLAN Topology Engineering VLAN 100 Router Switch Payroll VLAN 300 Tech Pubs VLAN 200 In this example, each port is manually configured so that the end station attached to the port is a member of the packet transmitted by the end station Configuring VLANs 573 Figure 21-1. PowerConnect 7000 Series switches also support VLAN assignment based on any of the following criteria: • MAC address of the end station • IP subnet of the end station • Protocol of the VLAN configured for this network is port-based or static. The VLAN membership for the port.
User Manual
Page 585
Configuring VLANs 585 Add Ports to VLAN 4 Click Apply. 5 Verify that the ports have been added to the VLAN. Figure 21-5.
Configuring VLANs 585 Add Ports to VLAN 4 Click Apply. 5 Verify that the ports have been added to the VLAN. Figure 21-5.
User Manual
Page 590
...MAC address and the VLAN ID are specified, the MAC to a VLAN. Bind MAC to VLAN Use the Bind MAC to VLAN page to map a MAC address to VLAN configurations are shared across all ports of the switch. Figure 21-11. To display the Bind MAC to VLAN page, click Switching → VLAN → Bind ...MAC to 128 entries. The MAC to VLAN table supports ...
...MAC address and the VLAN ID are specified, the MAC to a VLAN. Bind MAC to VLAN Use the Bind MAC to VLAN page to map a MAC address to VLAN configurations are shared across all ports of the switch. Figure 21-11. To display the Bind MAC to VLAN page, click Switching → VLAN → Bind ...MAC to 128 entries. The MAC to VLAN table supports ...
User Manual
Page 591
To display the Bind IP Subnet to VLAN page, click Switching → VLAN → Bind IP Subnet to 64 entries configured in the navigation panel. There can be up to VLAN in this table. Figure 21-12. Figure 21-13. Bind IP Subnet to VLAN configurations are shared across all ports of the switch. The IP Subnet to VLAN Configuring VLANs 591 MAC-VLAN Bind Table Bind IP Subnet to VLAN Use the Bind IP Subnet to VLAN page to assign an IP Subnet to a VLAN.
To display the Bind IP Subnet to VLAN page, click Switching → VLAN → Bind IP Subnet to 64 entries configured in the navigation panel. There can be up to VLAN in this table. Figure 21-12. Figure 21-13. Bind IP Subnet to VLAN configurations are shared across all ports of the switch. The IP Subnet to VLAN Configuring VLANs 591 MAC-VLAN Bind Table Bind IP Subnet to VLAN Use the Bind IP Subnet to VLAN page to assign an IP Subnet to a VLAN.
User Manual
Page 599
To display the Double VLAN Interface Configuration page, click Switching → VLAN → Double VLAN → Interface Configuration in the first EtherType/tag pair of the EtherType field in the navigation panel. Figure 21-22. Double VLAN Interface Configuration Use the Double VLAN Interface Configuration page to edit settings for one or more interfaces, click Show All. Configuring VLANs 599 Double VLAN Interface Configuration To view a summary of the double VLAN configuration for all interfaces and to specify the value of the double-tagged frame.
To display the Double VLAN Interface Configuration page, click Switching → VLAN → Double VLAN → Interface Configuration in the first EtherType/tag pair of the EtherType field in the navigation panel. Figure 21-22. Double VLAN Interface Configuration Use the Double VLAN Interface Configuration page to edit settings for one or more interfaces, click Show All. Configuring VLANs 599 Double VLAN Interface Configuration To view a summary of the double VLAN configuration for all interfaces and to specify the value of the double-tagged frame.
User Manual
Page 601
... and receive unauthenticated traffic on the switch before you disable voice VLAN authentication. Voice VLAN authentication can be enabled on the Voice VLAN. Voice VLAN Use the Voice VLAN Configuration page to configure and view voice VLAN settings that do not support authentication to specific interfaces. Configuring VLANs 601 Voice VLAN Configuration NOTE: IEEE 802.1X must be disabled in the navigation...
... and receive unauthenticated traffic on the switch before you disable voice VLAN authentication. Voice VLAN authentication can be enabled on the Voice VLAN. Voice VLAN Use the Voice VLAN Configuration page to configure and view voice VLAN settings that do not support authentication to specific interfaces. Configuring VLANs 601 Voice VLAN Configuration NOTE: IEEE 802.1X must be disabled in the navigation...
User Manual
Page 603
... be a member of one untagged VLAN. interface interface Enter interface configuration mode for example gigabitethernet 1/0/3. switchport access vlan Configure the interface as a member of interfaces with the interface range command, for the specified interface. Configuring VLANs 603 You can configure each interface separately, or you configure the interface as an untagged layer 2 VLAN interface. The interface variable includes the...
... be a member of one untagged VLAN. interface interface Enter interface configuration mode for example gigabitethernet 1/0/3. switchport access vlan Configure the interface as a member of interfaces with the interface range command, for the specified interface. Configuring VLANs 603 You can configure each interface separately, or you configure the interface as an untagged layer 2 VLAN interface. The interface variable includes the...
User Manual
Page 614
... example, interface range gi1/0/8-12 enters Interface Configuration mode for all interfaces. 614 Configuring VLANs Use enable to prevent voice traffic on unauthorized voice vlan port. CTRL + Z Exit to enable the Voice VLAN feature on the switch and on the switch. show voice vlan [interface {interface |all}] Display voice VLAN configuration information for the switch, for the specified...
... example, interface range gi1/0/8-12 enters Interface Configuration mode for all interfaces. 614 Configuring VLANs Use enable to prevent voice traffic on unauthorized voice vlan port. CTRL + Z Exit to enable the Voice VLAN feature on the switch and on the switch. show voice vlan [interface {interface |all}] Display voice VLAN configuration information for the switch, for the specified...
User Manual
Page 615
...21-25 shows the network topology for this department's traffic to the office. VLAN Configuration Examples This section contains the following examples: • Configuring VLANs Using Dell OpenManage Administrator • Configuring VLANs Using the CLI • Configuring a Voice VLAN A network administrator wants to a layer 3 device and the rest of ... conference room. 400 Payroll Port-based The payroll department has sensitive traffic and needs its own VLAN to help keep that connects it to create the VLANs in the Marketing department use this VLAN. Configuring VLANs 615
...21-25 shows the network topology for this department's traffic to the office. VLAN Configuration Examples This section contains the following examples: • Configuring VLANs Using Dell OpenManage Administrator • Configuring VLANs Using the CLI • Configuring a Voice VLAN A network administrator wants to a layer 3 device and the rest of ... conference room. 400 Payroll Port-based The payroll department has sensitive traffic and needs its own VLAN to help keep that connects it to create the VLANs in the Marketing department use this VLAN. Configuring VLANs 615
User Manual
Page 616
Network Topology for Port-Based VLAN Configuration Switch 1 VLAN 400 Payroll LAN/WAN Switch 2 VLAN 200 Marketing VLAN 100 Engineering Payroll Server Payroll Hosts Marketing Hosts Shared File Engineering Server Hosts The network in Figure 21-25 has the following characteristics: ...share the same file server. • Because security is a concern for the Payroll VLAN, the ports and LAG that are members of this VLAN will accept and transmit only traffic tagged with VLAN 400. • The Sales staff might connect to a port on Switch 1 or Switch 2. 616 Configuring VLANs Figure 21-25.
Network Topology for Port-Based VLAN Configuration Switch 1 VLAN 400 Payroll LAN/WAN Switch 2 VLAN 200 Marketing VLAN 100 Engineering Payroll Server Payroll Hosts Marketing Hosts Shared File Engineering Server Hosts The network in Figure 21-25 has the following characteristics: ...share the same file server. • Because security is a concern for the Payroll VLAN, the ports and LAG that are members of this VLAN will accept and transmit only traffic tagged with VLAN 400. • The Sales staff might connect to a port on Switch 1 or Switch 2. 616 Configuring VLANs Figure 21-25.
User Manual
Page 746
... sets the number of that multicast group. Enabling fast-leave allows the switch to configure IGMP snooping settings on the specified VLAN. Command CTRL + Z show ip igmp snooping show ip igmp snooping interface interface Purpose...VLANs. ip igmp snooping maxresponse vlan-id seconds Specify the leave time-out value for the specified VLAN. ip igmp snooping mcrtexpiretime vlan-id seconds Specify the multicast router time-out value for to associate with this VLAN is deleted from the member list of seconds configured with a VLAN. vlan database Enter VLAN Configuration...
... sets the number of that multicast group. Enabling fast-leave allows the switch to configure IGMP snooping settings on the specified VLAN. Command CTRL + Z show ip igmp snooping show ip igmp snooping interface interface Purpose...VLANs. ip igmp snooping maxresponse vlan-id seconds Specify the leave time-out value for the specified VLAN. ip igmp snooping mcrtexpiretime vlan-id seconds Specify the multicast router time-out value for to associate with this VLAN is deleted from the member list of seconds configured with a VLAN. vlan database Enter VLAN Configuration...
User Manual
Page 747
... EXEC mode, use as the source address when generating periodic queries. Command Purpose configure Enter global configuration mode. ip igmp snooping querier Enable the IGMP snooping querier on [vlan vlan-id] [address the VLAN specified with the vlan-id parameter. vlan database Enter VLAN Configuration mode. Configuring L2 Multicast Features 747 The version range is the amount of the query...
... EXEC mode, use as the source address when generating periodic queries. Command Purpose configure Enter global configuration mode. ip igmp snooping querier Enable the IGMP snooping querier on [vlan vlan-id] [address the VLAN specified with the vlan-id parameter. vlan database Enter VLAN Configuration mode. Configuring L2 Multicast Features 747 The version range is the amount of the query...