Alcatel-Lucent 6850-48 网络指南
Defining VLAN Rules
Configuring VLAN Rule Definitions
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
page 8-15
Defining MAC Address Rules
MAC address rules capture frames that contain a source MAC address that matches the MAC address
specified in the rule. The mobile port that receives the matching traffic is dynamically assigned to the
rule’s VLAN. Using MAC address rules, however, limits dynamic port assignment to a single VLAN. A
mobile port can only belong to one MAC address rule VLAN, even if it sends traffic that matches rules
defined for other VLANs.
specified in the rule. The mobile port that receives the matching traffic is dynamically assigned to the
rule’s VLAN. Using MAC address rules, however, limits dynamic port assignment to a single VLAN. A
mobile port can only belong to one MAC address rule VLAN, even if it sends traffic that matches rules
defined for other VLANs.
For example, if VLAN 10 has a MAC address rule defined for 00:00:2a:59:0c:f1 and VLAN 20 has an IP
protocol rule defined, mobile port 4/2 sending IP traffic with a source MAC address of 00:00:2a:59:0c:f1
is only assigned to VLAN 10. All mobile port 4/2 traffic is forwarded on VLAN 10, even though its traf-
fic also matches the VLAN 20 IP protocol rule.
protocol rule defined, mobile port 4/2 sending IP traffic with a source MAC address of 00:00:2a:59:0c:f1
is only assigned to VLAN 10. All mobile port 4/2 traffic is forwarded on VLAN 10, even though its traf-
fic also matches the VLAN 20 IP protocol rule.
To define a MAC address rule, enter vlan followed by an existing VLAN ID then mac followed by a valid
MAC address. For example, the following command defines a MAC address rule for VLAN 255:
MAC address. For example, the following command defines a MAC address rule for VLAN 255:
-> vlan 255 mac 00:00:da:59:0c:11
Only one MAC address is specified when using the vlan mac command to create a MAC address rule.
Therefore, to specify multiple MAC addresses for the same VLAN, create a separate rule for each address.
If dealing with a large number of MAC addresses, consider using MAC address range rules described in
the next section.
Therefore, to specify multiple MAC addresses for the same VLAN, create a separate rule for each address.
If dealing with a large number of MAC addresses, consider using MAC address range rules described in
the next section.
Use the no form of the
-> vlan 255 no mac 00:00:da:59:0c:11
Defining MAC Range Rules
A MAC range rule is similar to a MAC address rule, but allows the user to specify a range of MAC
addresses. This is useful when it is necessary to define rules for a large number of sequential MAC
addresses. One MAC range rule could serve the same purpose as 10 or 20 MAC address rules, requiring
less work to configure.
addresses. This is useful when it is necessary to define rules for a large number of sequential MAC
addresses. One MAC range rule could serve the same purpose as 10 or 20 MAC address rules, requiring
less work to configure.
Frames that contain a source MAC address that matches the low or high end MAC or that falls within the
range specified by the low and high end MAC trigger dynamic port assignment to the rule’s VLAN. As is
the case with MAC address rules, dynamic port assignment is limited to a single VLAN. A mobile port
can only belong to one MAC range rule VLAN, even if it sends traffic that matches rules defined for other
VLANs.
range specified by the low and high end MAC trigger dynamic port assignment to the rule’s VLAN. As is
the case with MAC address rules, dynamic port assignment is limited to a single VLAN. A mobile port
can only belong to one MAC range rule VLAN, even if it sends traffic that matches rules defined for other
VLANs.
To define a MAC range rule, enter vlan followed by an existing VLAN ID then mac range followed by
valid low and high end MAC addresses. For example, the following command creates a MAC range rule
for VLAN 1000:
valid low and high end MAC addresses. For example, the following command creates a MAC range rule
for VLAN 1000:
-> vlan 1000 mac range 00:00:da:00:00:01 00:00:da:00:00:09
Only valid source MAC addresses are allowed for the low and high end boundary MACs. For example,
multicast addresses (e.g., 01:00:00:c5:09:1a) are ignored even if they fall within a specified MAC range
and are not allowed as the low or high end boundary MAC. If an attempt is made to use a multicast
address for one of the boundary MACs, an error message is displayed and the rule is not created.
multicast addresses (e.g., 01:00:00:c5:09:1a) are ignored even if they fall within a specified MAC range
and are not allowed as the low or high end boundary MAC. If an attempt is made to use a multicast
address for one of the boundary MACs, an error message is displayed and the rule is not created.
Use the no form of the
command to remove a MAC range rule. Note that it is only neces-
sary to enter the low end MAC address to identify which rule to remove.
-> vlan 1000 no mac range 00:00:da:00:00:01