Configuring Vlan Rule Definitions - Alcatel OmniSwitch 6624 Network Configuration Manual

Defining VLAN Rules
Precedence Step/Rule Type
14. Network Address
15. Protocol
16. Custom (User Defined)
17. Default

Configuring VLAN Rule Definitions

Consider the following when configuring rules for a VLAN:
The VLAN must already exist. Use the
•
command to verify a VLAN is already configured. Refer to
more information.
Which type of rule to define; DHCP, binding, MAC address, protocol, network address, custom, or
•
port. Refer to "VLAN Rule Types" on page 7-4
What is the rule's precedence compared to other rules defined for other VLANs. If mobile port traffic
•
matches rules defined for more than one VLAN, the mobile port is dynamically assigned to the VLAN
with the higher precedence rule. Refer to
more information.
It is possible to define multiple rules for the same VLAN, as long as each rule is different. If mobile
•
port traffic matches only one of the rules, the port and traffic are dynamically assigned to that VLAN.
There is no limit to the number of rules defined for a single VLAN and up to 8,129 of each rule type is
•
allowed per switch.
It is possible to create a custom rule or protocol rules based on Ether type, SNAP type, or DSAP/SSAP
•
values. It is recommended, however, to use predefined rules (such as MAC address, network address,
and generic protocol rules) whenever possible to ensure accurate results when capturing mobile port
traffic.
When a VLAN is administratively disabled, static port and dynamic mobile port assignments are
•
retained but traffic on these ports is not forwarded. However, VLAN rules remain active and continue
to classify mobile port traffic for VLAN membership.
When a VLAN is deleted from the switch configuration, all rules defined for that VLAN are automati-
•
cally removed and any static or dynamic port assignments are dropped.
It is possible to define MAC-port-IP, MAC-port-protocol, MAC-port, and port-IP binding rules for
•
Authenticated VLANs (AVLANs). However, these rules are not active until the avlan port-bound
command is issued for the AVLAN. Note that these rules only apply to traffic received on authenti-
cated ports. See Chapter 18, "Configuring Authenticated VLANs,"
OmniSwitch 6624/6648 Network Configuration Guide
Condition
Frame contains a matching IP sub-
net address, or
Frame contains a matching IPX
network address.
Frame contains a matching proto-
col type.
Frames contain data that matches
customized rule criteria.
Frame does not match any rules.
vlan command to create a new VLAN or the
for a summary of rule type definitions.
"Understanding VLAN Rule Precedence" on page 7-8
April 2004
Configuring VLAN Rule Definitions
Result
Frame source is assigned to the
rule's VLAN.
Frame source is assigned to the
rule's VLAN.
Frame source is assigned to the
rule's VLAN.
Frame source is assigned to the
rule's VLAN.
Frame source is assigned to
mobile port's default VLAN.
Chapter 4, "Configuring VLANs,"
for more information.
show vlan
for
for
page 7-11