Protocol-based VLAN Assignment
Context
The switch enabled with protocol-based VLAN assignment cannot process protocol packets sent to the CPU, and it is recommended that protocol-based VLAN assignment be used in Layer 2 transparent transmission scenarios.
Both IP subnet-based and protocol-based VLAN assignment are called network layer-based VLAN assignment, which reduces manual VLAN configuration workload and allows users to easily join a VLAN, transfer from one VLAN to another, and exit from a VLAN. The switch that has protocol-based VLAN assignment enabled processes only untagged frames, and treats tagged frames in the same manner as interface-based VLAN assignment.
If protocol-based VLANs are configured on the interface and the protocol profile of the frame matches a protocol-based VLAN, the switch adds the VLAN tag to the frame.
If protocol-based VLANs are configured on the interface and the protocol profile of the frame matches no protocol-based VLAN, the switch adds the PVID of the interface to the frame.
Procedure
- Run system-view
The system view is displayed.
- (Optional) Run vlan assign global { vlan-id1 [ to vlan-id2 ] } &<1-5>
VLANs that can be globally assigned are specified.
After VLANs are assigned, the VLANs created using the vlan vlan-id command must be within the assignable VLAN range.
- (Optional) Run vlan reserved vlan-id
A reserved VLAN is configured.
By default, the reserved VLAN ID ranges from 4064 to 4094. After vlan-id is specified, the VLAN specified by vlan-id to the VLAN specified by vlan-id plus 30 are configured as reserved VLANs.CE12800E that has the ED-E/EG-E/EGA-E series cards installed does not support this step.
- Run vlan vlan-id
A VLAN is created, and the VLAN view is displayed. If the specified VLAN has been created, the VLAN view is directly displayed.
The VLAN ID ranges from 1 to 4094 (excluding reserved VLANs). If VLANs need to be created in batches, run the vlan batch { vlan-id1 [ to vlan-id2 ] } &<1-10> command to create VLANs in batches, and then run the vlan vlan-id command to enter the view of a specified VLAN.
If VLANs are created in a batch, you are advised to create at most 400 VLANs at one time.
If a device is configured with multiple VLANs, configuring names for these VLANs is recommended:
Run the name vlan-name command in the VLAN view. After a VLAN name is configured, you can run the vlan vlan-name vlan-name command in the system view to enter the corresponding VLAN view.
Manually configuring and maintaining VLANs is challenging on a large Layer 2 network. Configuration inconsistency may occur. To improve maintenance efficiency and simplify configuration, run the vlan range { vlan-id1 [ to vlan-id2 ] } &<1-10> command to create a temporary VLAN range and configure services in the VLAN range view. Services are then delivered in batches to all the VLANs in the VLAN range.
- Run protocol-vlan [ protocol-index ] { at | ipv4 | ipv6 | ipx { ethernetii | llc | raw | snap } | mode { ethernetii-etype etype-id1 | llc dsap dsap-id ssap ssap-id | snap-etype etype-id2 } }
Protocols are associated with VLANs and a protocol profile is specified.
protocol-index specifies the index of a protocol profile.
A protocol profile depends on protocol types and encapsulation formats, and a VLAN associated with a protocol can be defined in a protocol profile.
When specifying the source and destination service access points, pay attention to the following points:
dsap-id and ssap-id cannot be both set to 0xaa.
dsap-id and ssap-id cannot be both set to 0xe0. 0xe0 indicates llc, encapsulation format of IPX packets.
dsap-id and ssap-id cannot be both set to 0xff. 0xff indicates raw, encapsulation format of IPX packets.
- Run quit
The system view is displayed.
- Configure attributes for the Ethernet interface.
Run interface interface-type interface-number
The view of the interface that allows the protocol-based VLAN is displayed.
Run port link-type hybrid
The interface is configured as the hybrid interface.
Protocol-based VLAN assignment can only be configured on hybrid interfaces.
Run port hybrid untagged vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all }
The hybrid interface is configured to allow the protocol-based VLAN.
- Run protocol-vlan vlan vlan-id { all | protocol-index1 [ to protocol-index2 ] }
The interface is associated with a protocol-based VLAN.
vlan-id must be the ID of a protocol-based VLAN.
- Run commit
The configuration is committed.