02.10.2013 Views

FTOS Configuration Guide for the C-Series - Force10 Networks

FTOS Configuration Guide for the C-Series - Force10 Networks

FTOS Configuration Guide for the C-Series - Force10 Networks

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

In Step 2, <strong>the</strong> show vlan command in EXEC privilege mode indicates that <strong>the</strong> interface is now part of <strong>the</strong><br />

Default VLAN (VLAN 1).<br />

<strong>Force10</strong>(conf)#int gi 3/2<br />

<strong>Force10</strong>(conf-if)#no shut<br />

<strong>Force10</strong>(conf-if)#switchport<br />

<strong>Force10</strong>(conf-if)#show config<br />

!<br />

interface GigabitE<strong>the</strong>rnet 3/2<br />

no ip address<br />

switchport<br />

no shutdown<br />

<strong>Force10</strong>(conf-if)#end<br />

<strong>Force10</strong>#show vlan<br />

Codes: * - Default VLAN, G - GVRP VLANs<br />

NUM Status Q Ports<br />

* 1 Active U Gi 3/2<br />

2 Active T Po1(So 0/0-1)<br />

T Gi 3/0<br />

<strong>Force10</strong>#<br />

Figure 91 Interfaces and <strong>the</strong> Default VLAN Example<br />

By default, VLAN 1 is <strong>the</strong> Default VLAN. To change that designation, use <strong>the</strong> default vlan-id command<br />

in <strong>the</strong> CONFIGURATION mode. You cannot delete <strong>the</strong> Default VLAN.<br />

Untagged interfaces must be part of a VLAN, so, to remove an untagged interface from <strong>the</strong> Default VLAN,<br />

you must create ano<strong>the</strong>r VLAN and place <strong>the</strong> interface into that VLAN. The alternative is to enter <strong>the</strong> no<br />

switchport command, and <strong>FTOS</strong> removes <strong>the</strong> interface from <strong>the</strong> Default VLAN.<br />

A tagged interface requires an additional step to remove it from Layer 2 mode. Since tagged interfaces can<br />

belong to multiple VLANs, you must remove <strong>the</strong> tagged interface from all VLANs, using <strong>the</strong> no tagged<br />

interface command. Only after <strong>the</strong> interface is untagged and a member of <strong>the</strong> Default VLAN can you use<br />

<strong>the</strong> no switchport command to remove <strong>the</strong> interface from Layer 2 mode. For more in<strong>for</strong>mation, see<br />

VLANs and Port Tagging on page 184.<br />

Port-Based VLANs<br />

Step 1—<strong>the</strong> switchport<br />

command places <strong>the</strong> interface in<br />

Layer 2 mode<br />

Step 2—<strong>the</strong> show vlan command<br />

indicates that <strong>the</strong> interface is now<br />

assigned to VLAN 1 (<strong>the</strong> *<br />

indicates <strong>the</strong> Default VLAN)<br />

Port-based VLANs are a broadcast domain defined by different ports or interfaces. In <strong>FTOS</strong>, a port-based<br />

VLAN can contain interfaces from different line cards within <strong>the</strong> chassis. <strong>FTOS</strong> supports 4094 port-based<br />

VLANs.<br />

Port-based VLANs offer increased security <strong>for</strong> traffic, conserve bandwidth, and allow switch<br />

segmentation. Interfaces in different VLANs do not communicate with each o<strong>the</strong>r, adding some security to<br />

<strong>the</strong> traffic on those interfaces. Different VLANs can communicate between each o<strong>the</strong>r by means of IP<br />

routing. Because traffic is only broadcast or flooded to <strong>the</strong> interfaces within a VLAN, <strong>the</strong> VLAN conserves<br />

bandwidth. Finally, you can have multiple VLANs configured on one switch, thus segmenting <strong>the</strong> device.<br />

Interfaces within a port-based VLAN must be in Layer 2 mode and can be tagged or untagged in <strong>the</strong><br />

VLAN ID.<br />

<strong>FTOS</strong> <strong>Configuration</strong> <strong>Guide</strong>, version 7.7.1.0 183

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!