Example, Using Dynamic Egress To Control Traffic; Example, Dynamic Egress Application - Enterasys SmartSwitch 6000 User Manual

Example, Using Dynamic Egress to Control Traffic

12.4 EXAMPLE, USING DYNAMIC EGRESS TO CONTROL TRAFFIC
In this simple example
attached to PCs supporting both protocols AppleTalk (809B and 80F3) and IP. Two PCs support IP
only. The AppleTalk frame traffic is to be contained so only the users running the AppleTalk
protocol can communicate with each other and not flood the network with AppleTalk frames.
However, all users are to have access to a web server connected to Port 7.
Figure 12-2 Example, Dynamic Egress Application
Solving the Problem
In this example, Switch 1 (S1) has already been configured with a default VLAN 0001 associated
with Filter Database Identifier (FDB ID) 0001 as the Port VLAN Identifier (PVID) on all ports.
The following additional steps are required to configure the switch to solve this problem.
1. Define a new VLAN (VLAN ID 2) using the Static VLAN Configuration screen.
2. Create a Layer 2 rule to associate the protocol AppleTalk 809B and 80F3 to VLAN ID 2 (VID 2)
using the VLAN Classification Configuration screen. This rule is assigned to all ports.
3. Enable the dynamic egress control on VLAN 2 using the Network Tools command
(dynamic_egress enable 2).
With the above configuration, an AppleTalk frame received on any port will be classified into
VLAN 2 (the AppleTalk VLAN), and the Port VLAN List of that port is updated to include
VLAN 2.
For instance, if Port 1 or 2 is connected to a new AppleTalk user, the AppleTalk frames received on
that port are dynamically associated with VLAN 2 and VLAN 2 is added to the Port VLAN List of
12-40 Network Tools Screens
(Figure 12-2), assume that there are four ports on the switch module