Port Assignment Scheme; Port String Syntax Used In The Cli; Preparing For Vlan Configuration; About Pvids And Policy Classification To A Vlan - Enterasys Matrix DFE-Gold Series Configuration Manual

VLAN Configuration Summary

Port Assignment Scheme

For information on this device's port assignment scheme, refer to "Port String Syntax Used in the
CLI" on page 4‐2.

Port String Syntax Used in the CLI

For information on how to designate port numbers in the CLI syntax, refer to "Port String Syntax
Used in the CLI" on page 4‐2.

Preparing for VLAN Configuration

A little forethought and planning is essential to a good VLAN implementation. Before attempting
to configure a single device for VLAN operation, consider the following:
• How many VLANs will be required?
• What stations will belong to them?
• What ports are connected to those stations?
• What ports will be configured as GVRP‐aware ports?
It is also helpful to sketch out a diagram of your VLAN strategy.

About PVIDs and Policy Classification to a VLAN

Port VLAN IDs (PVIDs) assign VLAN IDs to untagged frames on one or more ports. Using the set
port vlan command as described in "set port vlan" on page 7‐10, you can, for example, assign
ports 1, 5, 8, and 9 to VLAN 3. Untagged frames received on those ports will be assigned to VLAN
3. (By default, all ports are members of VLAN ID 1, the default VLAN.)
Policy classification to a VLAN, as described in Chapter
precedence over PVID assignment if:
• Policy classification is configured to a VLAN as described in "set policy rule" on page 8‐13,
and
• PVID override has been enabled for a policy profile, and assigned to port(s) associated with
the PVID as described in "set policy profile" on page 8‐3.
For more information about configuring user policy profiles, including PVID override, protocol‐
based policy classification a VLAN or Class of Service, and assigning ports to policy profiles, refer
to Chapter

Creating a Secure Management VLAN

If the Matrix Series device is to be configured for multiple VLAN's, it may be desirable to
configure a management‐only VLAN. This allows a station connected to the management VLAN
to manage the device. It also makes management secure by preventing configuration via ports
assigned to other VLANs.
To create a secure management VLAN, you must:
1. Create a new VLAN. ("set vlan" on page 7‐6)
2. Set the PVID for the host port and the desired switch port to the VLAN created in Step 1. ("set
port vlan" on page 7‐10)
7-2 802.1Q VLAN Configuration
8.
8, "set policy rule" on page 8‐13, takes