User Manual
Page 26
... VLAN Interface Configuration 599 Voice VLAN 601 Configuring VLANs (CLI 602 Creating a VLAN 602 Configuring a Port in Access Mode 603 Configuring a Port in General Mode 604 Configuring a Port in Trunk Mode 605 Configuring VLAN Settings for a LAG 607 Configuring Double VLAN Tagging 608 Configuring MAC-Based VLANs 609 Configuring IP-Based VLANs 610 Configuring a Protocol-Based VLAN 610 Configuring GVRP 612 Configuring Voice VLANs 614 VLAN Configuration Examples 615 Configuring VLANs Using Dell OpenManage Administrator 618 Configure the VLANs...
... VLAN Interface Configuration 599 Voice VLAN 601 Configuring VLANs (CLI 602 Creating a VLAN 602 Configuring a Port in Access Mode 603 Configuring a Port in General Mode 604 Configuring a Port in Trunk Mode 605 Configuring VLAN Settings for a LAG 607 Configuring Double VLAN Tagging 608 Configuring MAC-Based VLANs 609 Configuring IP-Based VLANs 610 Configuring a Protocol-Based VLAN 610 Configuring GVRP 612 Configuring Voice VLANs 614 VLAN Configuration Examples 615 Configuring VLANs Using Dell OpenManage Administrator 618 Configure the VLANs...
User Manual
Page 32
... 789 DHCP Snooping Configuration 789 DHCP Snooping Interface Configuration . . . . . 790 DHCP Snooping VLAN Configuration 792 DHCP Snooping Persistent Configuration . . . . 794 DHCP Snooping Static Bindings Configuration 795 DHCP Snooping Dynamic Bindings Summary 797 DHCP Snooping Statistics 798 IPSG Interface Configuration 799 IPSG Binding Configuration 800 IPSG Binding Summary 801 DAI Global Configuration 802 DAI Interface Configuration 803 DAI VLAN Configuration 805 DAI ACL...
... 789 DHCP Snooping Configuration 789 DHCP Snooping Interface Configuration . . . . . 790 DHCP Snooping VLAN Configuration 792 DHCP Snooping Persistent Configuration . . . . 794 DHCP Snooping Static Bindings Configuration 795 DHCP Snooping Dynamic Bindings Summary 797 DHCP Snooping Statistics 798 IPSG Interface Configuration 799 IPSG Binding Configuration 800 IPSG Binding Summary 801 DAI Global Configuration 802 DAI Interface Configuration 803 DAI VLAN Configuration 805 DAI ACL...
User Manual
Page 37
... (Web 914 DHCP Relay Global Configuration 914 DHCP Relay Interface Configuration 915 DHCP Relay Interface Statistics 917 DHCP Relay VLAN Configuration 918 DHCP Relay Agent Configuration 919 IP Helper Global Configuration 920 IP Helper Interface Configuration 922 IP Helper Statistics 923 Configuring L2 and L3 Relay Features (CLI 925 Configuring L2 DHCP Relay 925 Configuring L3 Relay (IP Helper) Settings...
... (Web 914 DHCP Relay Global Configuration 914 DHCP Relay Interface Configuration 915 DHCP Relay Interface Statistics 917 DHCP Relay VLAN Configuration 918 DHCP Relay Agent Configuration 919 IP Helper Global Configuration 920 IP Helper Interface Configuration 922 IP Helper Statistics 923 Configuring L2 and L3 Relay Features (CLI 925 Configuring L2 DHCP Relay 925 Configuring L3 Relay (IP Helper) Settings...
User Manual
Page 105
... current mode, enter a question mark (?) at the command prompt. Commands in this mode configure the settings for VLANs. Commands in this mode create and remove VLANs and configure IGMP/MLD Snooping parameters for a specific interface or range of the command modes supports specific ...105 To display the commands available in the Privileged EXEC mode. The CLI includes several additional command modes. Each of interfaces. • VLAN Configuration - The main command modes include the following: • User EXEC - Commands in this mode permit you switch to another. Table...
... current mode, enter a question mark (?) at the command prompt. Commands in this mode configure the settings for VLANs. Commands in this mode create and remove VLANs and configure IGMP/MLD Snooping parameters for a specific interface or range of the command modes supports specific ...105 To display the commands available in the Privileged EXEC mode. The CLI includes several additional command modes. Each of interfaces. • VLAN Configuration - The main command modes include the following: • User EXEC - Commands in this mode permit you switch to another. Table...
User Manual
Page 122
... fields on page 843. To display the Route Entry Configuration page, click Routing → Router → Route Entry Configuration in the appropriate fields. 5 Click Apply. For information about VLAN routing interfaces, see "Configuring Routing Interfaces" on the page. Route Configuration (Default VLAN) Configuring a Default Gateway for the Switch: To configure the switch default gateway: 1 Open the Route Entry...
... fields on page 843. To display the Route Entry Configuration page, click Routing → Router → Route Entry Configuration in the appropriate fields. 5 Click Apply. For information about VLAN routing interfaces, see "Configuring Routing Interfaces" on the page. Route Configuration (Default VLAN) Configuring a Default Gateway for the Switch: To configure the switch default gateway: 1 Open the Route Entry...
User Manual
Page 510
...i.e., the client is a member of its response message to the switch. Guest VLAN The Guest VLAN feature allows a switch to provide a distinguished service to the Guest VLAN configured on a port, and the port is configured for both authenticated and guest clients to the 802.1X requests from any port ...and can get assigned to the client. Guest VLAN Supplicant mode can connect from the switch. If a ...
...i.e., the client is a member of its response message to the switch. Guest VLAN The Guest VLAN feature allows a switch to provide a distinguished service to the Guest VLAN configured on a port, and the port is configured for both authenticated and guest clients to the 802.1X requests from any port ...and can get assigned to the client. Guest VLAN Supplicant mode can connect from the switch. If a ...
User Manual
Page 531
...this example requires clients to use MACbased authentication with Cisco® Secure Access Control Server (ACS) software. 2 Configure the settings on the Authentication Server, such as a RADIUS server with MAB. NOTE: The printer requires an ... 802.1X authentication. The administrator must configure the following examples: • Configuring 802.1X Authentication • Configuring MAC-Based Authentication Mode • Allowing RADIUS-Assigned VLANs and a Guest VLAN • Configuring Authentication Server Filter Assignments Configuring 802.1X Authentication The network in this...
...this example requires clients to use MACbased authentication with Cisco® Secure Access Control Server (ACS) software. 2 Configure the settings on the Authentication Server, such as a RADIUS server with MAB. NOTE: The printer requires an ... 802.1X authentication. The administrator must configure the following examples: • Configuring 802.1X Authentication • Configuring MAC-Based Authentication Mode • Allowing RADIUS-Assigned VLANs and a Guest VLAN • Configuring Authentication Server Filter Assignments Configuring 802.1X Authentication The network in this...
User Manual
Page 571
... such as department or project membership. The topics covered in this chapter include: • VLAN Overview • Default VLAN Behavior • Configuring VLANs (Web) • Configuring VLANs (CLI) • VLAN Configuration Examples VLAN Overview By default, all broadcasts. All ports in a broadcast domain also forward multicast and... do not need to be physically connected to the switch receives that broadcast. Like a bridge, a VLAN switch forwards traffic based on a PowerConnect 7000 Series switch are a greater security risk since all hosts receive all switchports on the Layer 2 ...
... such as department or project membership. The topics covered in this chapter include: • VLAN Overview • Default VLAN Behavior • Configuring VLANs (Web) • Configuring VLANs (CLI) • VLAN Configuration Examples VLAN Overview By default, all broadcasts. All ports in a broadcast domain also forward multicast and... do not need to be physically connected to the switch receives that broadcast. Like a bridge, a VLAN switch forwards traffic based on a PowerConnect 7000 Series switch are a greater security risk since all hosts receive all switchports on the Layer 2 ...
User Manual
Page 573
Simple VLAN Topology Engineering VLAN 100 Router Switch Payroll VLAN 300 Tech Pubs VLAN 200 In this network is a member of the packet transmitted by the end station Configuring VLANs 573 The VLAN membership for this example, each port is manually configured so that the end station attached to the port is port-based or static. PowerConnect 7000 Series switches also support VLAN assignment based on any of the following criteria: • MAC address of the end station • IP subnet of the end station • Protocol of the VLAN configured for the port. Figure 21-1.
Simple VLAN Topology Engineering VLAN 100 Router Switch Payroll VLAN 300 Tech Pubs VLAN 200 In this network is a member of the packet transmitted by the end station Configuring VLANs 573 The VLAN membership for this example, each port is manually configured so that the end station attached to the port is port-based or static. PowerConnect 7000 Series switches also support VLAN assignment based on any of the following criteria: • MAC address of the end station • IP subnet of the end station • Protocol of the VLAN configured for the port. Figure 21-1.
User Manual
Page 585
Configuring VLANs 585 Figure 21-5. Add Ports to VLAN 4 Click Apply. 5 Verify that the ports have been added to the VLAN.
Configuring VLANs 585 Figure 21-5. Add Ports to VLAN 4 Click Apply. 5 Verify that the ports have been added to the VLAN.
User Manual
Page 590
..., click Show All to see the MAC addresses that are mapped to VLAN in the navigation panel. To display the Bind MAC to VLAN page, click Switching → VLAN → Bind MAC to VLANs. The MAC to VLAN table supports up to VLAN configurations are specified, the MAC to 128 entries. Figure 21-11. From this page...
..., click Show All to see the MAC addresses that are mapped to VLAN in the navigation panel. To display the Bind MAC to VLAN page, click Switching → VLAN → Bind MAC to VLANs. The MAC to VLAN table supports up to VLAN configurations are specified, the MAC to 128 entries. Figure 21-11. From this page...
User Manual
Page 591
There can be up to VLAN Configuring VLANs 591 Bind IP Subnet to 64 entries configured in the navigation panel. The IP Subnet to VLAN in this table. To display the Bind IP Subnet to VLAN page, click Switching → VLAN → Bind IP Subnet to VLAN configurations are shared across all ports of the switch. Figure 21-12. Figure 21-13. MAC-VLAN Bind Table Bind IP Subnet to VLAN Use the Bind IP Subnet to VLAN page to assign an IP Subnet to a VLAN.
There can be up to VLAN Configuring VLANs 591 Bind IP Subnet to 64 entries configured in the navigation panel. The IP Subnet to VLAN in this table. To display the Bind IP Subnet to VLAN page, click Switching → VLAN → Bind IP Subnet to VLAN configurations are shared across all ports of the switch. Figure 21-12. Figure 21-13. MAC-VLAN Bind Table Bind IP Subnet to VLAN Use the Bind IP Subnet to VLAN page to assign an IP Subnet to a VLAN.
User Manual
Page 599
Configuring VLANs 599 Double VLAN Interface Configuration To view a summary of the double VLAN configuration for one or more interfaces, click Show All. To display the Double VLAN Interface Configuration page, click Switching → VLAN → Double VLAN → Interface Configuration in the first EtherType/tag pair of the double-tagged frame. Double VLAN Interface Configuration Use the Double VLAN Interface Configuration page to edit settings for all interfaces and to specify the value of the EtherType field in the navigation panel. Figure 21-22.
Configuring VLANs 599 Double VLAN Interface Configuration To view a summary of the double VLAN configuration for one or more interfaces, click Show All. To display the Double VLAN Interface Configuration page, click Switching → VLAN → Double VLAN → Interface Configuration in the first EtherType/tag pair of the double-tagged frame. Double VLAN Interface Configuration Use the Double VLAN Interface Configuration page to edit settings for all interfaces and to specify the value of the EtherType field in the navigation panel. Figure 21-22.
User Manual
Page 601
...: IEEE 802.1X must be disabled in the navigation panel. Voice VLAN authentication can be enabled on the Voice VLAN. Configuring VLANs 601 To display the page, click Switching → VLAN → Voice VLAN → Configuration in order to allow VoIP phones that apply to the entire system and to send and receive unauthenticated traffic on the...
...: IEEE 802.1X must be disabled in the navigation panel. Voice VLAN authentication can be enabled on the Voice VLAN. Configuring VLANs 601 To display the page, click Switching → VLAN → Voice VLAN → Configuration in order to allow VoIP phones that apply to the entire system and to send and receive unauthenticated traffic on the...
User Manual
Page 603
... a member of interfaces with the same settings. interface interface Enter interface configuration mode for example gigabitethernet 1/0/3. switchport access vlan Configure the interface as an untagged layer 2 VLAN interface. Configuring a Port in Access Mode Beginning in access mode, it can also specify a range of one untagged VLAN. The interface variable includes the interface type and number, for...
... a member of interfaces with the same settings. interface interface Enter interface configuration mode for example gigabitethernet 1/0/3. switchport access vlan Configure the interface as an untagged layer 2 VLAN interface. Configuring a Port in Access Mode Beginning in access mode, it can also specify a range of one untagged VLAN. The interface variable includes the interface type and number, for...
User Manual
Page 614
... | data priority {trust | untrust} | auth {enable | disable} | dscp value} Enable the voice vlan capability on the interface. • vlanid-The voice VLAN ID. • priority-The Dot1p priority for all interfaces. 614 Configuring VLANs Configuring Voice VLANs Beginning in packets arriving on the voice vlan port. • auth {enable | disable} - You can also specify a range of interfaces...
... | data priority {trust | untrust} | auth {enable | disable} | dscp value} Enable the voice vlan capability on the interface. • vlanid-The voice VLAN ID. • priority-The Dot1p priority for all interfaces. 614 Configuring VLANs Configuring Voice VLANs Beginning in packets arriving on the voice vlan port. • auth {enable | disable} - You can also specify a range of interfaces...
User Manual
Page 615
... switch has an uplink port that traffic private. Configuring VLANs 615 VLAN Configuration Examples This section contains the following examples: • Configuring VLANs Using Dell OpenManage Administrator • Configuring VLANs Using the CLI • Configuring a Voice VLAN A network administrator wants to a single VLAN helps reduce the amount of the corporate network. Example VLANs VLAN VLAN Name VLAN Type Purpose ID 100 Engineering Port-based All employees...
... switch has an uplink port that traffic private. Configuring VLANs 615 VLAN Configuration Examples This section contains the following examples: • Configuring VLANs Using Dell OpenManage Administrator • Configuring VLANs Using the CLI • Configuring a Voice VLAN A network administrator wants to a single VLAN helps reduce the amount of the corporate network. Example VLANs VLAN VLAN Name VLAN Type Purpose ID 100 Engineering Port-based All employees...
User Manual
Page 616
Network Topology for Port-Based VLAN Configuration Switch 1 VLAN 400 Payroll LAN/WAN Switch 2 VLAN 200 Marketing VLAN 100 Engineering Payroll Server Payroll Hosts Marketing Hosts Shared File Engineering Server Hosts The network in Figure 21-25 has the following characteristics: ...share the same file server. • Because security is a concern for the Payroll VLAN, the ports and LAG that are members of this VLAN will accept and transmit only traffic tagged with VLAN 400. • The Sales staff might connect to a port on Switch 1 or Switch 2. 616 Configuring VLANs Figure 21-25.
Network Topology for Port-Based VLAN Configuration Switch 1 VLAN 400 Payroll LAN/WAN Switch 2 VLAN 200 Marketing VLAN 100 Engineering Payroll Server Payroll Hosts Marketing Hosts Shared File Engineering Server Hosts The network in Figure 21-25 has the following characteristics: ...share the same file server. • Because security is a concern for the Payroll VLAN, the ports and LAG that are members of this VLAN will accept and transmit only traffic tagged with VLAN 400. • The Sales staff might connect to a port on Switch 1 or Switch 2. 616 Configuring VLANs Figure 21-25.
User Manual
Page 746
... snooping on the specified VLAN. vlan database Enter VLAN Configuration mode. ip igmp snooping fastleave vlan-id Enables IGMP snooping fast-leave mode on the specified VLAN. Command Purpose configure Enter global configuration mode. ip igmp snooping groupmembershipinterval vlan-id seconds Specify the host time-out value for to the interface. ip igmp snooping mcrtexpiretime vlan-id seconds Specify the...
... snooping on the specified VLAN. vlan database Enter VLAN Configuration mode. ip igmp snooping fastleave vlan-id Enables IGMP snooping fast-leave mode on the specified VLAN. Command Purpose configure Enter global configuration mode. ip igmp snooping groupmembershipinterval vlan-id seconds Specify the host time-out value for to the interface. ip igmp snooping mcrtexpiretime vlan-id seconds Specify the...
User Manual
Page 747
... periodic queries. ip igmp snooping querier Enable the IGMP snooping querier on the switch or on the VLAN. Configuring L2 Multicast Features 747 View the IGMP snooping settings on [vlan vlan-id] [address the VLAN specified with the vlan-id parameter. ip igmp snooping querier Set the IGMP snooping querier query interval time, which query-interval...
... periodic queries. ip igmp snooping querier Enable the IGMP snooping querier on the switch or on the VLAN. Configuring L2 Multicast Features 747 View the IGMP snooping settings on [vlan vlan-id] [address the VLAN specified with the vlan-id parameter. ip igmp snooping querier Set the IGMP snooping querier query interval time, which query-interval...