Connect Two Switches With Two Restricted EVLANs

This example assumes the same configuration of SEFOS1 as is described in Single-Switch Configuration. The additional switch that is included in the multiple-switch configuration (SEFOS2) is configured as described in this section.

1. Disable GVRP.

   SEFOS# conf t
   SEFOS(config)# set gvrp disable
   SEFOS(config)#
   

2. Create the principal VLAN and add ports to it.

   SEFOS(config)# evlan 10
   SEFOS(config-evlan)# ports internal extreme-ethernet 0/2,0/11-12 external extreme-ethernet 0/1 name main
   

3. Create a group-restricted EVLANs and add ports to it.

   SEFOS(config-evlan)# evlan 100 group ports internal extreme-ethernet 0/2 external extreme-ethernet 0/1 name group100
   

4. Create a solitary-restricted EVLAN and add ports to it.

   SEFOS(config-evlan)# evlan 600 solo ports internal extreme-ethernet 0/11-12 external extreme-ethernet 0/1 name solo600 
   SEFOS(config-evlan)# exit 
   SEFOS(config)# 
   

5. Enable the interfaces.

   SEFOS(config)# interface extreme-ethernet 0/1 
   SEFOS(config-if)# no shutdown 
   SEFOS(config-if)# exit 
   SEFOS(config)# 
   SEFOS(config)# interface extreme-ethernet 0/2 
   SEFOS(config-if)# no shut 
   SEFOS(config-if)# exit 
   SEFOS(config)# interface extreme-ethernet 0/11-12 
   SEFOS(config-if)# no shutdown 
   SEFOS(config-if)# exit 
   SEFOS(config)# 
   SEFOS(config)# end 
   

6. Check the configuration.

   SEFOS# show evlan 
    
   Exclusive Vlan database 
   --------------------------- 
    
   XVlan ID : 10 
   Type : Principal 
   Principal XVlan : 10 
   External Ports : Ex0/1 
   Internal Ports : Ex0/2, Ex0/11, Ex0/12 
   ISWTrunk Ports : 
   Name : main 
   ---------------------------------------------------- 
   XVlan ID : 100 
   Type : Restricted: Group 
   Principal XVlan : 10 
   External Ports : Ex0/1 
   Internal Ports : Ex0/2 
   ISWTrunk Ports : 
   Name : group100 
   ---------------------------------------------------- 
   XVlan ID : 600 
   Type : Restricted: Solitary 
   Principal XVlan : 10 
   External Ports : Ex0/1 
   Internal Ports : Ex0/11, Ex0/12 
   ISWTrunk Ports : 
   Name : solo600 
   ---------------------------------------------------- 
   

7. Verify the configuration by checking connectivity on the hosts connected to the external and internal ports.
   1. Ping between external and internal ports.

      nsn173-90:~ # ping 38.38.38.139
       
       
      PING 38.38.38.139 (38.38.38.139) 56(84) bytes of data. 
      64 bytes from 38.38.38.139: icmp_seq=1 ttl=64 time=3.44 ms 
      64 bytes from 38.38.38.139: icmp_seq=2 ttl=64 time=0.159 ms 
       
      [root@nsn173-139 ~]# ping 38.38.38.149
       
      PING 38.38.38.149 (38.38.38.149) 56(84) bytes of data. 
      64 bytes from 38.38.38.149: icmp_seq=1 ttl=255 time=0.318 ms 
      64 bytes from 38.38.38.149: icmp_seq=2 ttl=255 time=0.126 ms
       
      [root@nsn173-139 ~]# ping 38.38.38.66 
       
      PING 38.38.38.66 (38.38.38.66) 56(84) bytes of data. 
      64 bytes from 38.38.38.66: icmp_seq=1 ttl=64 time=1.06 ms 
      64 bytes from 38.38.38.66: icmp_seq=2 ttl=64 time=0.162 ms 
      64 bytes from 38.38.38.66: icmp_seq=3 ttl=64 time=0.115 ms
       
      [root@nsn173-139 ~]# ping 38.38.38.90
       
      PING 38.38.38.90 (38.38.38.90) 56(84) bytes of data. 
      64 bytes from 38.38.38.90: icmp_seq=1 ttl=64 time=1.68 ms 
      64 bytes from 38.38.38.90: icmp_seq=2 ttl=64 time=0.194 ms 
      64 bytes from 38.38.38.90: icmp_seq=3 ttl=64 time=0.145 ms
       
      [root@nsn173-147 ~]# ping 38.38.38.70
       
      PING 38.38.38.70 (38.38.38.70) 56(84) bytes of data. 
      64 bytes from 38.38.38.70: icmp_seq=0 ttl=64 time=0.193 ms 
      64 bytes from 38.38.38.70: icmp_seq=1 ttl=64 time=0.269 ms 
      64 bytes from 38.38.38.70: icmp_seq=2 ttl=64 time=0.099 ms 
      64 bytes from 38.38.38.70: icmp_seq=3 ttl=64 time=0.146 ms
       
      [root@nsn173-147 ~]# ping 38.38.38.146
       
      PING 38.38.38.146 (38.38.38.146) 56(84) bytes of data. 
      64 bytes from 38.38.38.146: icmp_seq=0 ttl=255 time=0.352 ms 
      64 bytes from 38.38.38.146: icmp_seq=1 ttl=255 time=0.261 ms 
      64 bytes from 38.38.38.146: icmp_seq=2 ttl=255 time=0.084 ms 
      

   2. Ping between hosts connected to group-restricted and solitary-restricted ports.

      [root@nsn173-147 ~]# ping 38.38.38.64
       
      PING 38.38.38.64 (38.38.38.64) 56(84) bytes of data. 
      From 38.38.38.147 icmp_seq=1 Destination Host Unreachable 
      From 38.38.38.147 icmp_seq=2 Destination Host Unreachable 
      From 38.38.38.147 icmp_seq=3 Destination Host Unreachable 
      From 38.38.38.147 icmp_seq=5 Destination Host Unreachable 
      

   3. Ping between hosts on internal restricted ports.

      nsn173-90:~ # ping 38.38.38.149
       
      PING 38.38.38.149 (38.38.38.149) 56(84) bytes of data. 
      ^C 
      --- 38.38.38.149 ping statistics --- 
      2 packets transmitted, 0 received, 100% packet loss, time 999ms 
       
      nsn173-90:~ # ping 38.38.38.66
       
      PING 38.38.38.66 (38.38.38.66) 56(84) bytes of data. 
      ^C 
      --- 38.38.38.66 ping statistics --- 
      2 packets transmitted, 0 received, 100% packet loss, time 1013ms