Uni Vlans - Cisco ME 3400G-2CS - Ethernet Access Switch Software Configuration Manual

Chapter 11 Configuring VLANs
Table 11-1 Port Membership Modes (continued)
Membership Mode
Dynamic-access
Private VLAN
Tunnel
(dot1q-tunnel)
For more detailed definitions of access and trunk modes and their functions, see
page
When a port belongs to a VLAN, the switch learns and manages the addresses associated with the port
on a per-VLAN basis. For more information, see the
page

UNI VLANs

The Cisco ME switch is the boundary between customer networks and the service-provider network,
with user network interfaces (UNIs) connected to the customer side of the network. When customer
traffic enters or leaves the service-provider network, the customer VLAN ID must be isolated from other
customers' VLAN IDs. You can achieve this isolation by several methods, including using private
VLANs. On the Cisco ME switch, this isolation occurs by default by using UNI VLANs.
There are two types of UNI VLANs:
•
78-17058-01
VLAN Membership Characteristics
A dynamic-access port can belong to one VLAN (VLAN ID 1 to 4094) and is dynamically
assigned by a VMPS. The VMPS can be a Catalyst 5000 or Catalyst 6500 series switch, for
example, but never a Cisco ME 3400 Ethernet Access switch. The Cisco ME 3400 switch is a
VMPS client.
Note Only UNIs can be dynamic-access ports.
You can have dynamic-access ports and trunk ports on the same switch, but you must connect the
dynamic-access port to an end station or hub and not to another switch.
For configuration information, see the
section on page 11-26.
A private VLAN port is a host or promiscuous port that belongs to a private VLAN primary or
secondary VLAN. Only NNIs can be configured as promiscuous ports.
For information about private VLANs, see
Tunnel ports are used for IEEE 802.1Q tunneling to maintain customer VLAN integrity across a
service-provider network. You configure a tunnel port on an edge switch in the service-provider
network and connect it to an IEEE 802.1Q trunk port on a customer interface, creating an
assymetric link. A tunnel port belongs to a single VLAN that is dedicated to tunneling.
Tunneling is supported only when the switch is running the metro access or metro IP access image.
For more information about tunnel ports, see
Protocol Tunneling."
11-15.
5-19.
UNI isolated VLAN—This is the default VLAN state for all VLANs created on the switch. Local
switching does not occur among UNIs on the switch that belong to the same UNI isolated VLAN.
This configuration is designed for cases when different customers are connected to UNIs on the
same switch. However, switching is allowed among UNIs on different switches even though they
belong to the same UNI isolated VLAN.
"Configuring Dynamic-Access Ports on VMPS Clients"
Chapter 12, "Configuring Private VLANs."
Chapter 13, "Configuring IEEE 802.1Q and Layer 2
"Managing the MAC Address Table" section on
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
Understanding VLANs
Table 11-4 on
11-5