IronPort Systems 4108GL - Manual (Page 343)

14-37
Port-Based Virtual LANs (VLANs) and GVRP
GVRP
P
o
rt
-Ba
sed V
ir
tual
LANs
(VLANs)
a
n
d
G
V
RP
Planning for GVRP Operation
These steps outline the procedure for setting up dynamic VLANs for a seg-
ment.
1. Determine the VLAN topology you want for each segment (broadcast
domain) on your network.
2. Determine the VLANs that must be static and the VLANs that can be
dynamically propagated.
3. Determine the device or devices on which you must manually create static
VLANs in order to propagate VLANs throughout the segment.
4. Determine security boundaries and how the individual ports in the seg-
ment will handle dynamic VLAN advertisements. (See table 14-2 on page
14-34 and table 14-3 on page 14-35.)
5. Enable GVRP on all devices you want to use with dynamic VLANs and
configure the appropriate “Unknown VLAN” parameter (
Learn, Block, or
Disable) for each port.
6. Configure the static VLANs on the switch(es) where they are needed,
along with the per-VLAN parameters (
Tagged, Untagged, Auto, and Forbid—
see table 14-3 on page 14-35) on each port.
7. Dynamic VLANs will then appear automatically, according to the config-
uration options you have chosen.
8. Convert dynamic VLANs to static VLANs where you want dynamic VLANs
to become permanent.
Configuring GVRP On a Switch
The procedures in this section describe how to:
■ View the GVRP configuration on a switch
■ Enable and disable GVRP on a switch
■ Specify how individual ports will handle advertisements
To view or configure static VLANs for GVRP operation, refer to “Per-Port Static
VLAN Configuration Options” on page 14-8.
Menu: Viewing and Configuring GVRP
1. From the Main Menu, select: