Dell Force10 S2410-01-10GE-24P SFTOS Configuration Guide - Page 223

Creating an IP Subnet-based VLAN Note: IP Subnet-based VLAN functionality was not tested in SFTOS 2.5.2.0, so it is not supported. As shown in Figure 14-183, use the vlan association subnet ipaddr netmask command in Interface VLAN mode to configure an IP subnet-based VLAN by associating the VLAN with an IP address and subnet mask. Use the show vlan association subnet [ipaddr netmask] command to display the settings. Figure 14-183. Using the vlan association subnet and show vlan association subnet Commands Force10 (Config)#interface vlan 24 Force10 (conf-if-vl-vlan-24)#vlan association subnet 192.168.10.10 255.255.255.0 Force10 (conf-if-vl-vlan-24)#exit Force10 (Config)#show vlan association subnet IP Address IP Mask VLAN ID 192.168.10.10 255.255.255.0 2 Configuring a Private Edge VLAN (PVLAN) Use the Private Edge VLAN feature to prevent selected ports on the switch from forwarding traffic to each other, even if they are on the same VLAN. • Protected ports cannot forward traffic to other protected ports in the same group, even if they have the same VLAN membership. Protected ports can forward traffic to unprotected ports. • Unprotected ports can forward traffic to both protected and unprotected ports. If a port is configured as a protected port, and you then add that port to a Link Aggregation Group (LAG) (also called a port channel), its protected port status becomes operationally disabled, and the port follows its configuration defined for the LAG. However, its protected port configuration remains, so if you remove the port from the LAG, the protected port configuration for that port automatically becomes effective. The commands supporting this feature are: • show interfaces switchport • show switchport protected • switchport protected (Global Config) • switchport protected (Interface Config) For syntax details, see the System Configuration chapter in the SFTOS Command Reference. VLANs | 223