Vlan Port Assignments - Cisco Catalyst 2000 Configuration Handbook

Access_1(config-vlan)# end
Access_1 #copy running-config startup-config

6-2: VLAN Port Assignments

VLANs are assigned to individual switch ports.
■
Ports can be statically assigned to a single VLAN or dynamically assigned to a single
■
VLAN.
All ports are assigned to VLAN 1 by default.
■
Ports are active only if they are assigned to VLANs that exist on the switch.
■
Static port assignments are performed by the administrator and do not change unless
■
modified by the administrator, whether the VLAN exists on the switch.
■ Dynamic VLANs are assigned to a port based on the MAC address of the device
plugged into a port.
Dynamic VLAN configuration requires a VLAN Membership Policy Server (VMPS)
■
client, server, and database to operate properly.
Configuring Static VLANs
On a Cisco switch, ports are assigned to a single VLAN. These ports are referred to as
access ports and provide a connection for end users or node devices, such as a router or
server. By default all devices are assigned to VLAN 1, known as the default VLAN. After
creating a VLAN, you can manually assign a port to that VLAN, and it can communicate
only with or through other devices in the VLAN. Configure the switch port for member-
ship in a given VLAN as follows:
Statically assign a VLAN:
1.
(global) interface type mod/port
(interface) switchport access vlan number
For the device, you must first select the port or port range and then use the
switchport access vlan command followed by the VLAN number.
Caution If the VLAN that the port is assigned to does not exist in the database, the port
is disabled until the VLAN is created.
Configuring Dynamic VLANs
Although static VLANs are the most common form of port VLAN assignments, it is pos-
sible to have the switch dynamically allocate a VLAN based on the authentication. The
IEEE 802.1X standard defines a client and server-based access control and authentication
protocol that restricts unauthorized clients from connecting to a LAN through publicly
Chapter 6: VLANs and Trunking 91