7 configuring protocol-based vlans, Protocol-vlan protocol-group (configuring groups) – PLANET SGSD-1022 User Manual

Page 591

Advertising
background image

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P

5.21.7 Configuring Protocol-based VLANs

The network devices required to support multiple protocols cannot be easily grouped into a common VLAN. This may require

non-standard devices to pass traffic between different VLANs in order to encompass all the devices participating in a specific

protocol. This kind of configuration deprives users of the basic benefits of VLANs, including security and easy accessibility.

To avoid these problems, you can configure this switch with protocol-based VLANs that divide the physical network into logical

VLAN groups for each required protocol. When a frame is received at a port, its VLAN membership can then be determined

based on the protocol type in use by the inbound packets.

Command

Function

Mode

protocol-vlan protocol-group

Create a protocol group, specifying the supported protocols

GC

protocol-vlan protocol-group

Maps a protocol group to a VLAN

IC

show protocol-vlan

protocol-group

Shows the configuration of protocol groups

PE

show interfaces protocol-group Shows the mapping of protocol groups to VLAN

PE

Table 5-73 Protocol-based VLAN Commands

To configure protocol-based VLANs, follow these steps:

1. First configure VLAN groups for the protocols you want to use (page 4-226). Although not mandatory, we suggest

configuring a separate VLAN for each major protocol running on your network. Do not add port members at this time.

2. Create a protocol group for each of the protocols you want to assign to a VLAN using the protocol-vlan protocol-group

command (General Configuration mode).

3. Then map the protocol for each interface to the appropriate VLAN using the protocol-vlan protocol-group command

(Interface Configuration mode).

protocol-vlan protocol-group (Configuring Groups)

This command creates a protocol group, or adds specific protocols to a group. Use the no form to remove a protocol group.

Syntax

protocol-vlan protocol-group group-id [{add | remove} protocol-type {apple_talk | ip | ipx | 0-ffff frame-type frame}]

no protocol-vlan protocol-group group-id

• group-id - Group identifier of this protocol group. (Range: 1-2147483647)

• frame - Frame type used by this protocol. (Options: ethernet, llc-other, rfc-1042, snap_8021h). The frame type must be

specified if you manually define the protocol type with its hexadecimal code instead of choosing the preconfigured

protocol types of apple_talk, ip or ipx. The three preconfigured protocol types match all frame-types.

Default Setting

No protocol groups are configured.

591

Advertising
This manual is related to the following products: