Foundry Networks Switch and Router, Installation And Configuration Manual, Page: 945 / 1070

Configuring Virtual LANs (VLANs)
December 2000 25 - 25
FastIron
(config-ip-subnet)# no dynamic
FastIron
(config-ip-subnet)# static ethernet 17 to 25
4. To permanently assign ports 1 – 12 and port 25 to IPX network 1 VLAN, enter the following commands:
FastIron
(config-ip-subnet)# ipx-network 1 ethernet_802.3 name Blue
FastIron
(config-ipx-network)# no dynamic
FastIron
(config-ipx-network)# static ethernet 1 to 12 ethernet 25
FastIron
(config-ipx-network)#
5. To permanently assign ports 12 – 25 to Appletalk VLAN, enter the following commands:
FastIron
(config-ipx-proto)# atalk-proto name Red
FastIron
(config-atalk-proto)# no dynamic
FastIron
(config-atalk-proto)# static ethernet 13 to 25
FastIron
(config-atalk-proto)# end
FastIron
# write memory
FastIron
#
Syntax: ip-subnet <ip-addr> <ip-mask> [name <string>]
Syntax: ipx-network <ipx-network-number> <frame-encapsulation-type> netbios-allow | netbios-disallow
[name <string>]
Syntax: ip-proto | ipx-proto | atalk-proto | decnet-proto | netbios-proto | other-proto
static | exclude | dynamic
ethernet <portnum> [to <portnum>] [name <string>]
Configuring IP Sub-net, IPX Network, and Protocol-Based VLANs
Within Port-Based VLANs
If you plan to use port-based VLANs in conjunction with protocol-based VLANs, you must create the port-based
VLANs first. Once you create a port-based VLAN, then you can assign Layer 3 protocol VLANs within the
boundaries of the port-based VLAN. Generally, you create port-based VLANs to allow multiple separate STP
domains.
EXAMPLE:
Suppose you need to provide three separate STP domains across an enterprise campus backbone. The first STP
domain (VLAN 2) requires a set of ports at each Layer 2 Switch location to be statically mapped to IP only. No
other protocols can enter the switches on this set of ports.
A second set of ports within STP domain VLAN 2 will be restricted to only IPX traffic. The IP and IPX protocol
VLANs will overlap on Port 1 of FastIron-A to support both protocols on the same router interface. The IP sub-
nets and IPX network that span the two protocol VLANs will be determined by the NetIron router configuration.
The IP and IPX Protocol VLANS ensure that only the ports included in the each Layer 3 protocol VLAN will see
traffic from the NetIron router.
The second STP domain (VLAN 3) requires that half the ports in the domain are dedicated to IP sub-net 1.1.1.0/
24 and the other ports are dedicated to IPX network 1. Similar to VLAN 2, Port 9 from VLAN 3 will be used to
carry this IP sub-net and IPX network to the NetIron router. No other protocols will be allowed to enter the network
on VLAN 3. Also, no IP packets with a source address on sub-net 1.1.1.0/24 or IPX packets with a source
address on network 1 will be allowed to enter the switches on VLAN 3.
There is no need to segment Layer 3 broadcast domains within the STP broadcast domain (VLAN 4). The NetIron
router will dictate the IP sub-nets and IPX network that are on VLAN 4. There are no Layer 3 protocol restrictions
on VLAN 4; however, the NetIron router is configured to only forward IP and IPX between STP domains.