Defining VLAN Rules
Sample VLAN Rule Configuration
OmniSwitch 6624/6648 Network Configuration Guide
April 2004
page 7-3
Sample VLAN Rule Configuration
The following steps provide a quick tutorial that will create an IP network address and DHCP MAC range
rule for VLAN 255, an IPX protocol rule for VLAN 355, and a MAC-IP-port binding rule for VLAN
1500. The remaining sections of this chapter provide further explanation of all VLAN rules and how they
are defined.
1
Create VLAN 255 with a description (e.g., Finance IP Network) using the following command:
-> vlan 255 name "Finance IP Network"
2
Define an IP network address rule for VLAN 255 that will capture mobile port traffic containing a
network 21.0.0.0 IP source address. For example:
-> vlan 255 ip 21.0.0.0
3
Define a DHCP MAC range rule for VLAN 255 that will capture mobile port DHCP traffic that
contains a source MAC address that falls within the range specified by the rule. For example:
-> vlan 255 dhcp mac 00:DA:95:00:59:10 00:DA:95:00:59:9F
4
Define an IPX protocol rule for VLAN 355 that will capture mobile port traffic containing an IPX
protocol type value. For example:
-> vlan 355 protocol ipx-e2
5
Define a MAC-IP-port binding rule that restricts assignment to VLAN 1500 to traffic received on
mobile port 3/10 containing a MAC address of 00:DA:95:00:CE:3F and an IP address of 21.0.0.43. For
example:
-> vlan 1500 binding mac-ip-port 00:da:95:00:ce:3f 21.0.0.43 3/10
Note.
Optional
. To verify that the rules in this tutorial were defined for VLANs 255, 355, and 1500, enter
show vlan rules.
For example:
-> show vlan rules
Legend: type: * = binding rule
type
vlan rule
-----------------+------+-------------------------------------------------------
ip-net 255 21.0.0.0, 255.0.0.0
protocol 355 ipx-e2
mac-ip-port* 1500 00:da:95:00:ce:3f, 21.0.0.43, 3/10
dhcp-mac-range 255 00:da:95:00:59:10, 00:da:95:00:59:9f
