04-VLAN Operation 5500.pdf

8/17/2019 04-VLAN Operation 5500.pdf

1/33

Operation Manual – VLANH3C S5500-SI Series Ethernet Switches Table of Contents

i

Table of Contents

Chapter 1 VLAN Conf iguration .................................................................................................... 1-1

1.1 VLAN Overview.................................................................................................................. 1-1

1.1.1 Introduction to VLAN ............................................................................................... 1-1

1.1.2 VLAN Classification................................................................................................. 1-2

1.2 Basic VLAN Configuration ................................................................................................. 1-2

1.3 Basic VLAN Interface Configuration .................................................................................. 1-2

1.4 Port-Based VLAN Configuration........................................................................................ 1-3

1.4.1 Introduction of Port-Based VLAN............................................................................ 1-3

1.4.2 Configuring an Access Port-Based VLAN............................................................... 1-5

1.4.3 Configuring a Trunk Port-Based VLAN................................................................... 1-6

1.4.4 Configuring a Hybrid Port-Based VLAN.................................................................. 1-7

1.5 Displaying VLAN Configuration ......................................................................................... 1-8

1.6 VLAN Configuration Example ............................................................................................ 1-9

1.6.1 Network Requirements............................................................................................ 1-9

1.6.2 Network Diagram..................................................................................................... 1-9

1.6.3 Configuration Procedure ......................................................................................... 1-9

Chapter 2 Voice VLAN Configuration .......................................................................................... 2-1

2.1 Voice VLAN Overview ....................................................................................................... 2-1

2.1.1 Automatic and Manual Voice VLAN Modes............................................................ 2-1

2.1.2 Security and Ordinary Voice VLAN Modes............................................................. 2-4

2.2 Voice VLAN Configuration ................................................................................................. 2-4

2.2.1 Configuration Prerequisites..................................................................................... 2-4

2.2.2 Configuring Voice VLAN in Automatic Mode .......................................................... 2-5

2.2.3 Configuring Voice VLAN in Manual Mode............................................................... 2-6

2.3 Displaying Voice VLAN......................................................................................................2-7

2.4 Voice VLAN Configuration Example .................................................................................. 2-7

2.4.1 Voice VLAN Configuration Example (Automatic Mode).......................................... 2-7

2.4.2 Voice VLAN Configuration Example (Manual Mode).............................................. 2-9

Chapter 3 GVRP Conf iguration .................................................................................................... 3-1

3.1 Introduction to GARP......................................................................................................... 3-1

3.1.1 Introduction to GARP .............................................................................................. 3-1

3.1.2 Introduction to GVRP .............................................................................................. 3-3

3.1.3 Protocols and Standards......................................................................................... 3-4

3.2 Configuring GVRP ............................................................................................................. 3-4

3.2.1 Configuring GVRP................................................................................................... 3-4

3.2.2 Setting GARP Timer................................................................................................ 3-5

3.3 Displaying and Maintaining GARP/GVRP ......................................................................... 3-6


2/33

Operation Manual – VLANH3C S5500-SI Series Ethernet Switches Table of Contents

ii

3.4 GVRP Configuration Example ........................................................................................... 3-7

3.4.1 Example 1 ............................................................................................................... 3-7

3.4.2 Example 2 ............................................................................................................... 3-8

3.4.3 Example 3 ............................................................................................................... 3-9


3/33

Operation Manual – VLANH3C S5500-SI Series Ethernet Switches Chapter 1 VLAN Configuration

1-1

Chapter 1 VLAN Configuration

1.1 VLAN Overview

1.1.1 Introduction to VLAN

The virtual local area network (VLAN) technology is developed for switches to control

broadcast operations in LANs.

By creating VLANs in a physical LAN, you can divide the LAN into multiple logical LANs,

each of which has a broadcast domain of its own. Hosts in the same VLAN

communicate with each other as if they are in a LAN. However, hosts in different VLANs

cannot communicate with each other directly. In this way, a broadcast frame is confined

within one VLAN, as shown in Figure 1-1.

VLAN A

VLAN B

VLAN A

VLAN B

VLAN A

VLAN B

LAN Switch

LAN Switch

Router

Figure 1-1 A VLAN implementation

A VLAN can span across multiple switches, or even routers. This enables hosts in a

VLAN to be dispersed in a more loose way. That is, hosts in a VLAN can belong to

different physical network segments.

VLAN enjoys the following advantages.

Broadcasts are confined to VLANs. This decreases bandwidth utilization and

improves network performance.

Network security is improved. Packets of different VLANs are isolated during

transmission. That is, hosts in different VLANs cannot communicate with each

other directly. To enable communications between different VLANs, network

devices operating on Layer 3 (such as routers or Layer 3 switches) are needed.


4/33


1-2

Configuration workload is reduced. VLAN can be used to group specific hosts.

When the physical position of a host changes, no additional network configuration

is required if the host still belongs to the same VLAN.

1.1.2 VLAN Classification

Depending on how VLANs are established, VLANs fall into the following six categories:

Port-based VLAN

MAC-based VLAN

Protocol-based VLAN

IP sub network-based VLAN

Policy-based VLAN

Other VLAN

H3C S5500-SI Series Ethernet Switch supports the port-based VLAN. This chapter will

focus on the port-based VLAN.

1.2 Basic VLAN Configuration

Table 1-1 Basic VLAN configuration

To do… Use the command… Remarks

Enter system view system-view —

Create VLANs in bulk

vlan { vlan-id1 to

vlan-id2 | all }

Optional

Create a VLAN andenter VLAN view

vlan vlan-id

Required

If the specified VLAN does notexist, this command will firstcreate the VLAN, and thenenter VLAN view.

Specify the descriptionstring of the VLAN

description text

Optional

By default, the descriptionstring of a VLAN is its VLANID, such as “VLAN 0001”.

1.3 Basic VLAN Interface Configuration

VLAN interface is a virtual interface in Layer 3 mode, and mainly used in realizing the

Layer 3 connectivity between different VLANs.


5/33


1-3

Table 1-2 Configure a VLAN interface



Create a VLAN interfaceand enter VLAN interfaceview

interface vlan-interfacevlan-interface-id

Required

If the specified VLANinterface does not exist,this command will createit first and then enterVLAN interface view.

Configure IP address ofVLAN interface

ip address ip-address { mask | mask-length }[ sub ]

Optional

By default, no IP addressis configured for a VLANinterface

Specify the descriptionstring for the currentVLAN interface

description text

Optional

By default, the descriptionstring of a VLAN interfaceis the name of the VLANinterface, such as“Vlan-interface1interface”.

Enable the VLANInterface

undo shutdown

Optional

By default, if all the portsunder the VLAN interfaceare down, the VLAN

interface is down; if one ormore ports under theVLAN interface are up,the VLAN interface is up.

Note:

Before creating a VLAN interface, the corresponding VLAN must exist. Otherwise, you

cannot create the VLAN interface successfully.

1.4 Port-Based VLAN Configuration

1.4.1 Introduction of Port-Based VLAN

Port-based VLAN is the simplest and most effective VLAN division method. It defines

its VLAN members according to the ports of a switch. After a specified port is added into

a specified VLAN, the port can forward the packets of the specified VLAN.


6/33


1-4

I. Link Type of an Ethernet Port

Depending on how a port processes VLAN tags when it forwards packets, the link type

of the port can be one of the following three types:

Access. An access port belongs to only one VLAN; it strips VLAN tags when

sending the packets of the VLAN. An access port is generally used to connect a

user device.

Trunk. A trunk port can belong to more than one VLAN and receives/sends the

packets of multiple VLANs; it is generally used to connect a switch.

Hybrid. A hybrid port can also belong to more than one VLAN and receives/sends

the packets of multiple VLANs; it is used to connect a switch or a user device.

The difference between the hybrid port and the trunk port is that:

A hybrid port allows the packets from multiple VLANs to be sent without tags.

A trunk port only allows the packets from the default VLAN to be sent without tags.

II. Default VLAN

You can configure a VLAN for a port. In additional, you can also configure a default

VLAN for the port. By default, the default VLAN of all the ports is VLAN 1. But you can

configure it as needed.

The default VLAN of an access port is the VLAN the access port belongs to and

cannot be configured.

Both of the trunk port and hybrid port allow multiple VLANs to pass through. You

can configure the default VLAN for them.

After you delete the default VLAN of a port through the undo vlan command, for

an access port, its default VLAN restore to VLAN 1; for a trunk or a hybrid port, its

default VLAN configuration remain unchanged, that is, a trunk port or hybrid port

can use the presently nonexistent VLAN as the default VLAN.

Note:

For ports of a voice VLAN in automatic mode, you cannot configure the voice VLAN as

the default VLAN of the ports. If you do so, the system will prompt that you cannotperform the configuration. For information about the voice VLAN, refer to Chapter 2

Voice VLAN Configuration.

The way by which a port processes incoming and outgoing packets depends on the link

type and default VLAN configured on it. Refer to the following table for details:


7/33


1-5

Table 1-3 Incoming and outgoing packets

Incoming packet

Port type If no tag is

carried in thepacket

If a tag is carried inthe packet

Outgoing packet

Accessport

Receive the packetwhen the VLAN ID(recorded in thetag) is the samewith the defaultVLAN ID.

Drop the packetwhen the VLAN IDis different with thedefault VLAN ID.

Remove the tag and sendthe packet directly for theVLAN ID is just the defaultVLAN ID.

Trunk port

When the VLAN ID isthe same with thedefault VLAN ID,remove the tag of thepacket first and thensend the packet.

When the VLAN ID isdifferent with thedefault VLAN ID but isallowed on the port,keep the original tagand send the packet.

Hybridport

Encapsulatethe defaultVLAN tag to thepacket

Receive the packetwhen the VLAN ID(recorded in thetag) is the samewith the defaultVLAN ID.

Receive the packetwhen the VLAN IDis different with thedefault VLAN IDbut is allowed onthe port.

Drop the packetwhen the VLAN IDis different with thedefault ID and isnot allowed on theport.

When the VLAN ID isallowed on the port, sendthe packet. You canconfigure whether or notto carry tags in theoutgoing packets of aVLAN (including defaultVLAN) through the porthybrid vlan command.

1.4.2 Configuring an Access Port-Based VLAN

You can configure an access port-based VLAN in two ways: configure it in VLAN view,

or configure it in Ethernet port view/port group view.


8/33


1-6

Table 1-4 Configure an access port-based VLAN (in VLAN view)



Enter VLAN view vlan vlan-id

Required

If the specified VLANdoes not exist, thiscommand will create theVLAN first and then enterVLAN view of the VLAN.

Add an Ethernet port to aspecified VLAN

port interface-list

Required

By default, the systemadds all ports to VLAN 1.

Table 1-5 Configure an access port-based VLAN (in Ethernet port view or port group

view)



EnterEthernetport view

interface interface-typeinterface-number Enter

Ethernetport view

or portgroupview

Enter portgroup view

port-group { manualport-group-name | aggregation agg-id }

Use either command

Configured in Ethernetport view, the followingsettings are effective on

the current port only;configured in port groupview, the followingsettings are effective onall ports in the port group

Configure a port as anaccess port

port link-type access

Optional

By default, a port is anaccess port.

Add the current accessport to a specified VLAN

port access vlan vlan-id

Required

By default, all accessports belong to VLAN 1.

Note:

You must add an access port to an existing VLAN.

1.4.3 Configuring a Trunk Port-Based VLAN

A trunk port allows multiple VLANs to pass, and you can configure it in Ethernet port

view/port group view.


9/33


1-7

Table 1-6 Configure a trunk port-based VLAN




interface interface-typeinterface-number

EnterEthernetport viewor portgroup view

Enter portgroup view


Use either command

Configured in Ethernetport view, the followingsettings are effective onthe current port only;configured in port groupview, the followingsettings are effective onall ports in the port group

Configure a port as a

trunk port

port link-type trunk

Required

By default, the link typeof a port is access.

Add the current trunkport to specified VLANs

port trunk permit vlan { vlan-id-list | all }

Required

By default, all trunk portsonly allow the packets ofVLAN 1 to pass.

Set the default VLAN forthe trunk port

port trunk pvid vlan vlan-id

Optional

By default, the defaultVLAN of the trunk port isVLAN 1

Note:

A trunk port and a hybrid port cannot switch to each other directly but must be

configured as an access port first. For example, a trunk port cannot be configured to

be a hybrid port directly; you must specify the trunk port as an access port first, and

then specify the access port as a hybrid port.

The default VLAN ID of the trunk port on the local switch must be the same as that of

the trunk port on the peer switch. Otherwise, the packets of the default VLAN cannot

be transmitted correctly from the local end to the peer end.

1.4.4 Configuring a Hybrid Port-Based VLAN

A hybrid port allows multiple VLANs to pass, and you can configure it in Ethernet port

view/port group view.


10/33


1-8

Table 1-7 Configure a hybrid port-based VLAN




interface interface-typeinterface-number Enter

Ethernetport viewor portgroupview

Enter portgroupview


Use either command

Configured in Ethernet portview, the following settingsare effective on the currentport only; configured in portgroup view, the followingsettings are effective on allports in the port group

Configure a port as aHybrid port

port link-type hybrid

Required

By default, the link type of aport is access.

Add the current hybridport to specifiedVLANs

port hybrid vlan vlan-id-list{ tagged | untagged }

Required

By default, all hybrid portsonly allow VLAN 1 packetsto pass.

Set the default VLANfor the hybrid port.

port hybrid pvid vlanvlan-id

Optional

By default, the defaultVLAN of the hybrid port isVLAN 1

Note:

A trunk port and a hybrid port cannot switch to each other directly but must be

configured as an access port first. For example, a trunk port cannot be configured to

be a hybrid port directly. You must specify the trunk port as an access port first, and

then specify the access port to a hybrid port.

The VLANs configured to be permitted to pass through a hybrid port must exist.

1.5 Displaying VLAN Configuration

After the above configuration, you can execute the display command in any view to

view the running of the VLAN configuration, and to verify the effect of the configuration.


11/33


1-9

Table 1-8 Display the information about specified VLANs


Display the informationabout specified VLANs

display vlan [ vlan-id1 [ to

vlan-id2 ] | all | static | dynamic |reserved ]

Display the informationabout specified VLANinterface

display interface vlan-interface[ vlan-interface-id ]

Available in anyview

1.6 VLAN Configuration Example

1.6.1 Network Requirements

Switch A connects with Switch B through the trunk port GigabitEthernet1/0/1.

The default VLAN ID of the port is 100.

The port permits the packets from VLAN 2, VLAN 6 through 50, and VLAN 100 to

pass.

1.6.2 Network Diagram

Switch BSwitch A

GigabitEthernet1/0/1

Switch BSwitch BSwitch A


Figure 1-2 Network diagram for port-based VLAN configuration

1.6.3 Configuration Procedure

1) Configure Switch A

# Create VLAN 2, VLAN 6 through VLAN 50 and VLAN 100.

syst em- vi ew

[ Sysname] vl an 2

[ Sysname- vl an2] qui t

[ Sysname] vl an 100


[ Sysname] vl an 6 to 50

Pl ease wai t . . . Done.

# Enter Ethernet port view of GigabitEthernet1/0/1.

[ Sysname] i nt er f ace Gi gabi t Et her net 1/ 0/ 1


12/33


1-10

# Configure GigabitEthernet1/0/1 as a trunk port, and configure its default VLAN ID as

VLAN 100.

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] por t l i nk- t ype t r unk

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] port t r unk pvi d vl an 100

# Configure GigabitEthernet1/0/1 to permit the packets from VLAN 2, VLAN 6 through

50, and VLAN 100 to pass.

[ Sysname- Gi gabi t Et her net 1/ 0/ 1] port t r unk per mi t vl an 2 6 to 50 100

Pl ease wai t . . . Done.

2) Configuration on Switch B is the same as that on Switch A.


13/33

Operation Manual – VLANH3C S5500-SI Series Ethernet Switches Chapter 2 Voice VLAN Configuration

2-1

Chapter 2 Voice VLAN Configuration

2.1 Voice VLAN Overview

Voice VLANs are VLANs configured specially for voice data stream. By adding the

ports with voice devices attached to voice VLANs, you can perform quality of service

(QoS)-related configuration for voice data, ensuring the transmission priority of voice

data stream and voice quality.

S5500-SI series Ethernet switches determine whether a received packet is a voice

packet by checking its source MAC address. If the source MAC addresses of packets

comply with the organizationally unique identifier (OUI) addresses configured by thesystem, the packets are determined as voice packets and transmitted in voice VLAN.

You can configure an OUI address for voice packets or specify to use the default OUI

address.

The following table shows the five default OUI addresses of a switch.

Table 2-1 Default OUI addresses preset by the switch

Number OUI Address Vendor

1 0001-e300-0000 Siemens phone

2 0003-6b00-0000 Cisco phone

3 00d0-1e00-0000 Pingtel phone

4 00e0-7500-0000 Polycom phone

5 00e0-bb00-0000 3com phone

Note:

An organizationally unique identifier (OUI) address is a globally unique identifier

assigned to a vendor by Institute of Electrical and Electronics Engineers (IEEE). Youcan determine which vendor a device belongs to according to the OUI address

which forms the first 24 bits of a MAC address.

You can add or delete the default OUI address manually.

2.1.1 Automatic and Manual Voice VLAN Modes

According to how a port is added to the voice VLAN, the port can work in one of the two

voice VLAN modes: automatic and manual.


14/33


2-2

In automatic mode, the system identifies the source MAC address contained in the

untagged packet sent when the IP phone is powered on and matches it against the

OUI addresses. If a match is found, the system will automatically add the port into

the Voice VLAN and send ACL rules to ensure the packet precedence. An agingtime can be configured on the device. The system will remove a port from the

voice VLAN if no voice packets are received from it within the aging time. The

adding and deleting of ports are automatically realized by the system.

In manual mode, the administrator adds the IP phone access port directly to the

voice VLAN. The system then identifies the source MAC address contained in the

packets on the port, matches it against the OUI addresses, and decides whether

to forward the packets in the voice VLAN. When the administrator adds a port to

the voice VLAN, the device automatically applies ACL rules to the port to configure

packet priority. In this mode, the adding or deleting of ports is realized by the

administrators.

In any of the two modes, the port forwards tagged packets in the same manner: forward

the tagged packets based on the VLAN IDs contained in them.

The above two working modes are configured in Ethernet port view. The voice VLAN

working modes of different ports are independent and different ports can be configured

to work in different modes.

The following table lists the co-relation between voice VLAN modes, voice traffic types

of IP phones, and port types.

Table 2-2 Port modes and voice stream types

Port voice VLANmode

Voicestream type

Port type Supported or not

Access Not supported

Trunk

Supported

Make sure the defaultVLAN of the port existsand is not a voice VLAN. And the port permits thepackets of the default

VLAN.

Tagged voice

stream

Hybrid

Supported

Make sure the defaultVLAN of the port existsand is in the list of thetagged VLANs whosepackets are permitted bythe port.

Access

Trunk

Automatic mode

Untaggedvoice stream

Hybrid

Not supported.


15/33


2-3

Port voice VLANmode

Voicestream type

Port type Supported or not

Access Not supported

Trunk

Supported

Make sure the defaultVLAN of the port existsand is not a voice VLAN. And the port permits thepackets of the defaultVLAN.

Tagged voicestream

Hybrid

Supported

Make sure the defaultVLAN of the port existsand is in the list of the

tagged VLANs whosepackets are permitted bythe port.

Access

Supported

Make sure the defaultVLAN of the port is avoice VLAN.

Trunk

Supported

Make sure the defaultVLAN of the port is avoice VLAN and the port

permits the packets of theVLAN.

Manual mode

Untagged

voice stream

Hybrid

Supported

Make sure the defaultVLAN of the port is avoice VLAN and is in thelist of untagged VLANswhose packets arepermitted by the port.


16/33


2-4

Caution:

If the voice stream transmitted by your IP phone is with VLAN tag and the port which

the IP phone is attached to is enabled with 802.1x authentication and 802.1x guest

VLAN, assign different VLAN IDs for the voice VLAN, the default VLAN of the port,

and the 802.1x guest VLAN to ensure the two functions to operate properly.

If the voice stream transmitted by the IP phone is without VLAN tag, the default

VLAN of the port which the IP phone is attached to can only be configured as a voice

VLAN for the voice VLAN function to take effect. In this case, 802.1x authentication

is unavailable.

Note:

The default VLAN of all ports is VLAN 1. You can use the corresponding command

to specify a default VLAN for a port, and allow certain VLAN to pass through the port.

Relate command “1.4 Port-Based VLAN”

Use the display interface command to display the VLANs allowed to pass through

a port and the default VLAN of the port.

2.1.2 Security and Ordinary Voice VLAN Modes

According to the packet filtering scheme of a port with voice VLAN function enabled, the

port works in one of the two voice VLAN modes: security and ordinary.

In security mode, the port with the voice VLAN function enabled allows only the

voice packets with source MAC address being recognizable OUI address. Other

packets are discarded (including some authentication packets, like 802.1x

authentication packets).

In ordinary mode, the port with voice VLAN function enabled allows both voice

packets and other types of packets to pass. Voice packets comply with the filtering

rule of the voice VLAN and other types of packets comply with the filtering rule of

the ordinary VLAN.

You are recommended not to transmit voice data and other service data in the voice

VLAN simultaneously. If you need to do so, make sure the voice VLAN mode is

ordinary.

2.2 Voice VLAN Configuration

2.2.1 Configuration Prerequisites

Create the corresponding VLAN before configuring voice VLAN.


17/33


2-5

VLAN 1 is the default VLAN and do not need to be created. But VLAN 1 does not

support the voice VLAN function.

2.2.2 Configuring Voice VLAN in Automatic Mode

Table 2-3 Configure voice VLAN in automatic mode



Set the aging time for thevoice VLAN

voice vlan aging minutes

Optional

The default aging time is1,440 minutes, and onlyeffective for the port inautomatic mode.

Enable the voice VLANsecurity mode

voice vlan securityenable

Optional

By default, the voiceVLAN security mode isenabled.

Set an OUI address thatcan be identified by thevoice VLAN

voice vlan mac-addressoui mask oui-mask [ description text ]

Optional

A voice VLAN has fivedefault OUI addresses.

Enable the voice VLANfunction globally

voice vlan vlan-id enable Required

Enter port view

interface interface-type

interface-number —

Set the voice VLANoperation mode toautomatic mode

voice vlan mode auto

Optional

The default voice VLANoperation mode isautomatic mode.

Enable the voice VLANfunction for the port

voice vlan enable

Required

By default, the voiceVLAN function is notenabled for a port.

Note:

For ports working in automatic mode, you cannot configure the default VLAN as the

voice VLAN. Otherwise, the system prompts you cannot perform the configuration.


18/33


2-6

2.2.3 Configuring Voice VLAN in Manual Mode

Table 2-4 Configure voice VLAN in manual mode



Enable the voice VLANsecurity mode

voice vlan securityenable

Optional

By default, the voice VLANsecurity mode is enabled.

Set an OUI address to beone that can be identifiedby the voice VLAN

voice vlanmac-address oui mask oui-mask [ description text ]

Optional

By default, after the voiceVLAN is enabled, it has fiveOUI addresses.

Enable the voice VLANfunction globally voice vlan vlan-id enable Required

Enter port viewinterface interface-typeinterface-number

—

Set voice VLAN operationmode to manual mode

undo voice vlan modeauto

Required

The default voice VLANoperation mode is automaticmode.

Add the manual modeport to the voice VLAN

Refer to section 1.4“Port-Based VLAN”

Required

By default, all ports belongto VLAN 1.

When you add a hybrid portto the voice VLAN, you needto configure the hybrid portto keep or strip the VLAN tagof the voice stream. Refer toTable 2-2 “Port modes andvoice stream types”.

Specify the voice VLANas the default VLAN of theport

Refer to section 1.4“Port-Based VLAN”

Optional

By default, the default VLANof all ports is VLAN 1.

Whether you need toconfigure the voice VLAN asthe default VLAN of a port,refer to Table 2-2 “Portmodes and voice streamtypes”.

Enable the voice VLANfunction for the port

voice vlan enable

Required

By default, the voice VLANfunction is disabled on aport.


19/33


2-7

Note:

Note the following when configuring voice VLAN in manual and automatic modes.

You can enable the voice VLAN function for only one static VLAN on a switch. And a

dynamic VLAN cannot be configured as a voice VLAN.

You cannot enable the voice VLAN function for a port if it has been enabled with the

link aggregation control protocol (LACP).

2.3 Displaying Voice VLAN

After the above configurations, you can execute the display command in any view to

view the running status and verify the configuration effect.

Table 2-5 Display a voice VLAN

To do... Use the command... Remarks

Display the voice VLAN state display voice vlan state

Display the OUI addressescurrently supported by system

display voice vlan oui Available in any view

2.4 Voice VLAN Configuration Example

2.4.1 Voice VLAN Configuration Example (Automatic Mode)

I. Network requirements

Create VLAN 2 and configure it as a voice VLAN with an aging time of 100

minutes.

Configure GigabitEthernet1/0/1 port as a trunk port, with VLAN 6 as the default

port.

The device allows voice packets from GigabitEthernet 1/0/1 with an OUI address

of 0011-2200-0000 and a mask of ffff-ff00-0000 to be forwarded through the voiceVLAN.


20/33


2-8

II. Network diagram

Tel.1 010-1001

OUI:0011-2200-0000

Mask:ffff-ff00-0000

WAN

VLAN 2


Tel.1 010-1001

OUI:0011-2200-0000

Mask:ffff-ff00-0000

WAN

VLAN 2


Figure 2-1 Network diagram for configuration of voice VLAN in automatic mode

III. Configuration procedure

# Create VLAN 2, VLAN 6.

syst em- vi ew

[ Sysname] vl an 2


[ Sysname] vl an 6


# Set aging time for the voice VLAN

[ Sysname] voi ce vl an agi ng 100

# Set 0011-2200-0000 to be one that can be identified by the voice VLAN

[ Sysname] voi ce vl an mac- address 0011- 2200- 0000 mask f f f f - f f 00- 0000

descri pt i on t est

# Enable the global voice VLAN function.

[ Sysname] voi ce vl an 2 enabl e

# Set the voice VLAN operation mode of GigabitEthernet1/0/1 to automatic mode.


[ Sysname- Gi gabi t Et her net 1/ 0/ 1] voi ce vl an mode aut o

# Specify port GigabitEthternet1/0/1 as a Trunk port.


# Set the default VLAN of the port to VLAN 6, and the port permits VLAN 6 to pass.

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] port t r unk permi t vl an 6

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] port t r unk pvi d vl an 6

# Enable the voice VLAN function for the port.

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] voi ce vl an enabl e


21/33


2-9

2.4.2 Voice VLAN Configuration Example (Manual Mode)


Create VLAN 2 and configure it as a voice VLAN. The voice stream transmitted by the IP phone is untagged, and the port which the

IP phone is attached to is a Hybrid port GigabitEthernet1/0/1.

GigbitEthernet1/0/1 works in manual mode, and only permits the voice packets

with the following features to pass: OUI address is 0011-2200-0000; network

mask is ffff-ff00-0000 and description string is “test”.

II. Network diagram

Tel.1 010-1001

OUI:0011-2200-0000

Mask:ffff-ff00-0000

WANVLAN 2


Tel.1 010-1001

OUI:0011-2200-0000

Mask:ffff-ff00-0000

WANVLAN 2


Figure 2-2 Voice VLAN Configuration Example


# Set the voice VALN to work in security mode to permit the legal voice packets to pass

(optional, defaults to security mode).

syst em- vi ew

[ Sysname] voi ce vl an secur i t y enabl e

# Set 0011-2200-0000 to be one that can be identified by the voice VLAN

[ Sysname] voi ce vl an mac- address 0011- 2200- 0000 mask f f f f - f f 00- 0000

descri pt i on t est

# Create VLAN 2, and enable the voice VLAN function for it.

[ Sysname] vl an 2


[ Sysname] voi ce vl an 2 enabl e

# Set GigabitEthernet1/0/1 to work in the manual mode.


[ Sysname- Gi gabi t Ether net 1/ 0/ 1] undo voi ce vl an mode auto

# Configure GigabitEthernet1/0/1 as a Hybrid port.


22/33


2-10

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] por t l i nk- t ype hybr i d

# Configure VLAN 2 as the default VLAN of port GigabitEthernet1/0/1, and allow

packets of VLAN 2 to pass through the port.

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] port hybr i d pvi d vl an 2

[ Sysname- Gi gabi t Et her net 1/ 0/ 1] port hybr i d vl an 2 unt agged

# Enable the voice VLAN function for the port GigabitEthernet1/0/1.

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] voi ce vl an enabl e

IV. Displaying and verification

# display the currently supported OUI addresses and the related information.

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] di spl ay voi ce vl an oui

Oui Addr ess Mask Descr i pt i on

0001- e300- 0000 f f f f - f f 00- 0000 Si emens phone

0003- 6b00- 0000 f f f f - f f 00- 0000 Ci sco phone

0011- 2200- 0000 f f f f - f f 00- 0000 t est

00d0- 1e00- 0000 f f f f - f f 00- 0000 Pi ngt el phone

00e0- 7500- 0000 f f f f - f f 00- 0000 Pol ycom phone

00e0- bb00- 0000 f f f f - f f 00- 0000 3comphone

# Display current voice VLAN state.

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] di spl ay voi ce vl an st at e

Voi ce VLAN st at us: ENABLE

Voi ce VLAN I D: 2

Voi ce VLAN secur i t y mode: Securi t y

Voi ce VLAN agi ng t i me: 100 mi nut es

Voi ce VLAN enabl ed por t and i t s mode:

PORT MODE

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Gi gabi t Ether net 1/ 0/ 1 MANUAL


23/33

Operation Manual – VLANH3C S5500-SI Series Ethernet Switches Chapter 3 GVRP Configuration

3-1

Chapter 3 GVRP Configuration

3.1 Introduct ion to GARP

3.1.1 Introduct ion to GARP

The generic attribute registration protocol (GARP), provides a mechanism that allows

participants in a GARP application to distribute, propagate, and register with other

participants in a bridged LAN the attributes specific to the GARP application, such as

the VLAN or multicast address attribute.

GARP-compliant application entities are called GARP applications. One example is

GVRP. When a GARP application entity is present on a port on your device, this port is

regarded a GARP application entity.

I. GARP messages and timers

1) GARP messages

Generally, GARP participants exchange information with each other through the

following three types of messages: Join, Leave, and LeaveAll.

Join to announce the willingness to register attributes with other participants.

Leave to announce the willingness to deregister with other participants. Together

with Join messages, Leave messages guarantee attribute reregistration and

deregistration.

LeaveAll to deregister all attributes. A LeaveAll message is sent upon expiration of

a LeaveAll timer which starts upon the startup of a GARP application entity.

Through message exchange, all attribute information that needs registration

propagates to all GARP participants throughout a bridged LAN.

2) GARP timers

GARP sets interval for sending GARP messages by using these four timers:

Hold timer –– When a GARP application entity receives the first registrationrequest, it starts a hold timer and collects succeeding requests. When the timer

expires, the entity sends all these requests in one Join message. This can thus

help you save bandwidth.

Join timer –– A GARP application entity can send a Join message twice to ensure

the message can be transmitted to other entities. The sending interval is set on the

join timer.

Leave timer –– Starts upon receipt of a Leave message. When this timer expires,

the GARP application entity removes attribute information as requested.


24/33


3-2

Leaveall timer –– Starts when a GARP application entity starts. When this timer

expires, the entity sends a LeaveAll message so that other entities can re-register

its attribute information. Then, a leaveall timer starts again.

Note:

The settings of GARP timers apply to all GARP applications, such as GVRP, running

on a LAN.

Unlike other three timers which are set on a port basis, the leaveall timer is set in

system view and takes effect globally.

A GARP application entity may send LeaveAll messages at the interval set by its

LeaveAll timer or the leaveall timer of another GARP application entity on the

network, whichever is smaller.

II. Operating mechanism of GARP

The GARP mechanism allows the configuration of a GARP participant to propagate

throughout a LAN quickly. In GARP, a GARP participant registers or deregisters its

attributes with other participants by making or withdrawing declarations of attributes

and at the same time, based on received declarations or withdrawals handles attributes

of other participants.

GARP application entities send protocol data units (PDU) with a particular multicastMAC address as destination. Based on this address, a device can identify to which

GVRP application, GVRP for example, should a GARP PDU be delivered.

III. GARP message format

The following figure illustrates the GARP message format.

Figure 3-1 GARP message format


25/33


3-3

The following table describes the GARP message fields.

Table 3-1 Description on the GARP message fields

Field Descript ion Value

Protocol ID Protocol identifier for GARP 1

MessageOne or multiple messages, eachcontaining an attribute type and anattribute list

––

Attribute TypeDefined by the concerned GARPapplication

0x01 for GVRP,indicating the VLAN IDattribute

Attribute List Consists of one or multiple attributes ––

Attribute

Consists of an Attribute Length, an

Attribute Event, and an AttributeValue. If the Attribute Event isLeaveAll, Attribute Value is omitted

––

Attribute LengthNumber of octets occupied by anattribute, inclusive of the attributelength field

2 to 255 in bytes

Attribute Event Event described by the attribute

0: LeaveAll

1: JoinEmpty

2: JoinIn

3: LeaveEmpty

4: LeaveIn

5: Empty

Attribute Value Attribute value VLAN ID for GVRP

End Mark Indicates the end of PDU of GARP ––

3.1.2 Introduct ion to GVRP

GVRP enables a device to propagate local VLAN registration information to other

participant devices and dynamically update the VLAN registration information from

other devices to its local database. It thus ensures that all GVRP participants on a

bridged LAN maintain the same VLAN registration information. The VLAN registration

information propagated by GVRP includes both manually configured local static entries

and dynamic entries from other devices.

GVRP provides the following three registration types on a port:

Normal –– Enables a port to dynamically register and deregister VLANs, and to

propagate both dynamic and static VLAN information.


26/33


3-4

Fixed –– Disables the port to dynamically register/deregister VLANs or propagate

dynamic VLAN information, but allows the port to propagate static VLAN

information. A trunk port with fixed registration type thus allows only manually

configured VLANs to pass through even though it is configured to carry all VLANs. Forbidden –– Disables the port to dynamically register/deregister VLANs, and to

propagate VLAN information except for VLAN 1. A trunk port with forbidden

registration type thus allows only VLAN 1 to pass through even though it is

configured to carry all VLANs.

3.1.3 Protocols and Standards

IEEE 802.1Q specifies GVRP.

3.2 Configuring GVRPWhen configuring GVRP, you need to configure timers, enable GVRP, and configure

GVRP registration mode.

Note:

GVRP can be configured only on a trunk port.

3.2.1 Configuring GVRP

Table 3-2 Configure GVRP on a trunk port


Enter system view system-view ––

Enable GVRP globally gvrpRequired

Disabled by default

Enter Ethernetport view

interface

interface-typeinterface-number

Enter Ethernetport view orport-group view Enter

port-group view


Perform either of the

commands.Depending on theview you accessed,the subsequentconfiguration takeseffect on a port or allports in aport-group.

Enable GVRP on the port gvrpRequired

Disabled by default


27/33


3-5


Configure GVRP registrationmode on the port

gvrp registration{ fixed | forbidden |

normal }

Optional

The default is

normal

Note:

BPDU TUNNEL is not compatible with GVRP. The two cannot be applied

simultaneously on a port. If you want to enable GVRP on a port, you need to disable

BPDU TUNNEL first.

3.2.2 Setting GARP Timer

Table 3-3 Set GARP timer

To do … Use the command… Remarks


Set GARP LeaveAll timergarp timer leavealltimer-value

Optional

By default, theLeaveAll timer is setto 1,000

centiseconds.

Enter Ethernetport view

interface interface-typeinterface-number

Enter Ethernetport view orport-group view Enter

port-group view


Perform either of thecommands.

Depending on theview you accessed,the subsequentconfiguration takeseffect on a port or allports in aport-group.

Set GARP Hold timer, Join timerand Leave timer

garp timer { hold | join| leave } timer-value

OptionalBy default, the Hold,Join, and Leavetimers are set to 10,20, and 60centisecondsrespectively.

When configuring GARP timers, note that their values are dependent on each other

and must be a multiplier of five centiseconds. If the value range for a timer is not desired,

you may change it by tuning the value of another timer as shown in the following table:


28/33


3-6

Table 3-4 Dependencies of GARP timers

Timer Lower limit Upper limit

Hold 10 centiseconds

Not greater than half of the

join timer setting

You can change this valueby changing the value of the join timer.

Join

Not less than two times the holdtimer setting

You can change this value bychanging the value of the holdtimer.

Less than half of the leavetimer setting

You can change this valueby changing the value of theleave timer.

Leave

Greater than two times the jointimer setting

You can change this value bychanging the value of the jointimer.

Less than the leaveall timersetting

You can change this valueby changing the value of theleaveall timer.

Leaveall

Greater than the leave timersetting

You can change this value bychanging the value of the leavetimer

32,765 centiseconds

3.3 Displaying and Maintaining GARP/GVRP

Table 3-5 Display and Maintain GARP/GVRP


Display statistics aboutGARP

display garp statistics [ interface interface-list ]

Display GARP timers forall or specified ports

display garp timer [ interface interface-list ]

Display statistics about

GVRP

display gvrp statistics

[ interface interface-list ]

Display the global GVRPstate

display gvrp status

Available in any view

Clear the GARP statisticsreset garp statistics [ interface interface-list ]

Available in user view


29/33


3-7

Switch B

3.4 GVRP Configuration Example

3.4.1 Example 1


Configure GVRP on devices and specify the port registration mode as normal to realize

dynamic VLAN information registration and update among devices.

II. Network diagram

Switch ASwitch A Switch BSwitch BSwitch BSwitch A Switch BSwitch A Switch BSwitch BSwitch BSwitch A Switch BSwitch A Switch BSwitch BSwitch B



Switch A Switch BSwitch A Switch BSwitch BSwitch BSwitch A Switch BSwitch A Switch BSwitch BSwitch BSwitch A Switch BSwitch A Switch BSwitch BSwitch B



Figure 3-2 Network diagram for GVRP configuration



# Enable GVRP globally.

syst em- vi ew

[ Sysname] gvrp

# Configure port GigabitEthernet1/0/1 as trunk, allowing all VLANs to pass.



[ Sysname-Gi gabi t Et her net 1/ 0/ 1] port t r unk permi t vl an al l

# Enable GVRP on GigabitEthernet1/0/1.

[ Sysname- Gi gabi t Et her net 1/ 0/ 1] gvr p

# Display static VLAN2.

[ Sysname-Gi gabi t Et her net 1/ 0/ 1] qui t

[ Sysname] vl an 2

[ Sysname- vl an2]

2) Configure Switch B


syst em- vi ew

[ Sysname] gvrp

# Configure port GigabitEthernet 1/0/2 as trunk, allowing all VLANs to pass.





30/33


3-8

Switch B

# Enable GVRP on GigabitEthernet 1/0/2.


# Configure static VLAN3.


[ Sysname] vl an 3

[ Sysname- vl an3]

3) Display configuration results

# Display dynamic VLAN on Switch A.

[ Sysname- vl an2] di spl ay vl an dynami c

Now, t he f ol l owi ng dynami c VLAN exi st ( s) :

3

# Display dynamic VLAN on Switch B[ Sysname- vl an3] di spl ay vl an dynami c


2

3.4.2 Example 2


Enable GVRP on devices and configure the port registration mode as fixed to realize

dynamic registration and update of some VLAN information between devices.

II. Network diagram

Switch ASwitch A Switch BSwitch BSwitch BSwitch A Switch BSwitch A Switch BSwitch BSwitch BSwitch A Switch BSwitch A Switch BSwitch BSwitch B



Switch A Switch BSwitch A Switch BSwitch BSwitch BSwitch A Switch BSwitch A Switch BSwitch BSwitch BSwitch A Switch BSwitch A Switch BSwitch BSwitch B



Figure 3-3 Network diagram for GVRP configuration




syst em- vi ew

[ Sysname] gvrp





# Enable GVRP on GigabitEthernet1/0/1


31/33


3-9


# Configure the GVRP registration mode as fixed.

[ Sysname- Gi gabi t Et her net 1/ 0/ 1] gvrp r egi st r at i on f i xed

# Create static VLAN 2.


[ Sysname] vl an 2

[ Sysname- vl an2]

2) Configure Switch B


syst em- vi ew

[ Sysname] gvrp





# Enable GVRP on GigabitEthernet1/0/2


# Create static VLAN 3.


[ Sysname] vl an 3

[ Sysname- vl an3]

3) Display the configuration

# Display the dynamic VLAN information on Switch A


No dynami c vl ans exi st !

# Display the dynamic VLAN information on Switch B.



2

3.4.3 Example 3


Enable GVRP on devices and configure the port registration mode as forbidden to

forbid dynamic registration and update of VLAN information between devices.


32/33


33/33


[ Sysname] vl an 3

[ Sysname- vl an3]

3) Display the configuration

# Display dynamic VLAN information on Switch A



# Display dynamic VLAN information on Switch B.



Date post:	06-Jul-2018
Category:	Documents
Upload:	pumaruna
View:	220 times
Download:	0 times

04-VLAN Operation 5500.pdf

Documents