Alcatel-Lucent 6850-48 ネットワークガイド

ページ / 1162
Defining VLAN Rules
Configuring VLAN Rule Definitions
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
page 8-13
Defining DHCP Generic Rules
DHCP generic rules capture all DHCP traffic that does not match an existing DHCP MAC or DHCP port 
rule. If none of these other rules exist, then all DHCP frames are captured regardless of the port they came 
in on or the frame’s source MAC address. Only one rule of this type is allowed per switch. 
To define a DHCP generic rule, enter vlan followed by an existing VLAN ID then dhcp generic. For 
example,
-> vlan 255 dhcp generic
Use the no form of the 
 command to remove a DHCP generic rule.
-> vlan 255 no dhcp generic
Defining Binding Rules
Binding rules require mobile port traffic to match all rule criteria. The criteria consists of one of three 
combinations, each of which is a specific binding rule type:
The device must attach to a specific switch port and use a specific MAC address and use a specific IP 
network address (MAC-port-IP address binding rule).
The device must use a specific port and a specific source MAC address (MAC-port binding rule).
The device must attach to a specific switch port and use a specific protocol (port-protocol binding 
rule).
If frames do not contain matching criteria, they are compared against other existing VLAN rules of lower 
precedence. However, if a frame violates criteria of any one binding rule, it is discarded. Refer to 
 for more information.
Note that MAC-port-IP and MAC-port binding rules are also supported on Authenticated VLANs 
(AVLANs). See 
 for more information. 
The following subsections provide information about how to define each of the binding rule types.
How to Define a MAC-Port-IP Address Binding Rule
To define a MAC-port-IP address binding rule, enter vlan followed by an existing VLAN ID then 
binding mac-ip-port followed by a valid MAC address, IP address, and a slot/port designation. For 
example, the following command defines a MAC-port-IP binding rule for VLAN 255:
-> vlan 255 binding mac-ip-port 00:00:da:59:0c:12 21.0.0.10 2/3
In this example, frames received on mobile port 2/3 must contain a source MAC address of 
00:00:da:59:0c:12 and a source IP address of 21.0.0.10 to qualify for dynamic assignment to VLAN 255. 
Use the no form of the 
 command to remove a MAC-port-IP binding rule. Note 
that it is only necessary to enter the rule’s MAC address parameter value to identify which rule to remove.
-> vlan 255 no binding mac-ip-port 00:00:da:59:0c:12
Note that this binding rule type is also supported on AVLANs. See 
 for more information.