12 Defining VLAN Rules
VLAN rules are used to classify mobile port traffic for dynamic VLAN port assignment. Rules are defined
by specifying a port, MAC address, protocol, network address, binding, or DHCP criteria to capture
certain types of network device traffic. It is also possible to define multiple rules for the same VLAN. A
mobile port is assigned to a VLAN if its traffic matches any one VLAN rule.
There is an additional method for dynamically assigning mobile ports to VLANs that involves enabling
VLAN mobile tagging. This method is similar to defining rules in that the feature is enabled on the VLAN
that is going to receive the mobile port tagged traffic. The difference, however, is that tagged packets
received on mobile ports are classified by their 802.1Q VLAN ID tag and not by whether or not their
source MAC, network address, or protocol type matches VLAN rule criteria.
In This Chapter
This chapter contains information and procedures for defining VLAN rules through the Command Line
Interface (CLI). CLI commands are used in the configuration examples; for more details about the syntax
of commands, see the OmniSwitch CLI Reference Guide. Refer to
Chapter 10, "Assigning Ports to VLANs,"
Configuration procedures described in this chapter include:
•
Defining DHCP rules on
•
Defining binding rules to restrict access to specific network devices on
•
Defining MAC address rules on
•
Defining IP and IPX network address rules on
•
Defining protocol rules on
•
Defining forwarding-only port rules on
•
Verifying the VLAN rule configuration on
For information about creating and managing VLANs, see
For information about enabling port mobility and defining mobile port properties, see
"Assigning Ports to VLANs."
OmniSwitch 6800/6850/9000 Network Configuration Guide
for information about the VLAN mobile tagging feature.
page
12-11.
page
12-15.
page
page
12-17.
page
12-18.
page
12-22.
Chapter 4, "Configuring VLANs,"
page
12-16.
Chapter 4, "Configuring VLANs."
March 2008
and
12-13.
Chapter 10,
page 12-1