Configure External and Internal Ports in a Solitary-Restricted EVLAN

To configure a single switch for use with EVLAN, you must first configure the external and internal ports. In the following example, EVLAN 10 is identified as the principal EVLAN, and EVLAN 600 is identified as a solitary-restricted EVLAN. This configuration has no group-restricted EVLANs.

For an example of configuring external and internal ports with group-restricted ports, see Configure Ports in Solitary- and Group-Restricted EVLANs.

1. Disable GVRP.

   SEFOS# conf t
   SEFOS(config)# evlan 10
    
     % GVRP/GARP Has to be disabled in Exclusive Vlan Mode
   SEFOS(config)# set gvrp disable
   SEFOS(config)#
   

2. Create the principal EVLAN.

   SEFOS(config)# evlan 10
   SEFOS(config-evlan)# 
   

   The mode changes to EVLAN configuration.

3. Add ports to the principal EVLAN.

   SEFOS(config-evlan)# ports internal extreme-ethernet 0/2,0/15,0/19,0/20 external extreme-ethernet 0/1 name main
   SEFOS(config-evlan)#
   

4. Create restricted VLANs and assign ports to them.

   The ports must belong to the principal EVLAN.

   SEFOS(config-evlan)# evlan 600 solo ports internal extreme-ethernet 0/2,0/15,0/19,0/20 external extreme-ethernet 0/1 name solo600
   SEFOS(config-evlan)# exit
   SEFOS(config)#
   

5. Enable the interfaces.

   SEFOS(config)# interface extreme-ethernet 0/1
   SEFOS(config-if)# no shutdown
   SEFOS(config-if)# exit
   SEFOS(config)# 
   SEFOS(config)# interface extreme-ethernet 0/2 
   SEFOS(config-if)# no shutdown 
   SEFOS(config-if)# exit 
   SEFOS(config)# 
   SEFOS(config)# end 
   

6. Check the configuration.

   SEFOS# show evlan 
    
   Exclusive Vlan database 
   --------------------------- 
   XVlan ID : 10 
   Type : Principal 
   Principal XVlan : 10 
   External Ports : Ex0/1 
   Internal Ports : Ex0/2, Ex0/15, Ex0/19, Ex0/20 
   ISWTrunk Ports : 
   Name : main 
   ---------------------------------------------------- 
   XVlan ID : 600 
   Type : Restricted: Solitary 
   Principal XVlan : 10 
   External Ports : Ex0/1 
   Internal Ports : Ex0/2, Ex0/15, Ex0/19, Ex0/20 
   ISWTrunk Ports : 
   Name : solo600 
   ---------------------------------------------------- 
   

7. Verify the configuration by checking connectivity on the hosts connected to the external and internal ports.

   The pings between solo internal and external ports are successful, and the pings between internal ports fail.

   1. Ping from the host on port 2 to the host on port 1.

      [root@nsn173-147 ~]# ping 38.38.38.146
       
      PING 38.38.38.146 (38.38.38.146) 56(84) bytes of data. 
      64 bytes from 38.38.38.146: icmp_seq=0 ttl=255 time=1.61 ms 
      64 bytes from 38.38.38.146: icmp_seq=1 ttl=255 time=0.288 ms 
       
      --- 38.38.38.146 ping statistics --- 
      2 packets transmitted, 2 received, 0% packet loss, time 1002ms 
      rtt min/avg/max/mdev = 0.288/0.952/1.616/0.664 ms, pipe 2 
      

   2. Ping from the host on port 20 to the host on port 1.

      [root@nsn173-64 ~]# ping 38.38.38.146
       
      PING 38.38.38.146 (38.38.38.146) 56(84) bytes of data. 
      64 bytes from 38.38.38.146: icmp_seq=1 ttl=255 time=1.19 ms 
      64 bytes from 38.38.38.146: icmp_seq=2 ttl=255 time=0.094 ms 
       
       
      --- 38.38.38.146 ping statistics --- 
      2 packets transmitted, 2 received, 0% packet loss, time 1000ms 
      rtt min/avg/max/mdev = 0.094/0.642/1.191/0.549 ms 
      

   3. Ping from the host on port 20 to the host on port 2.

      [root@nsn173-64 ~]# ping 38.38.38.147
       
      PING 38.38.38.147 (38.38.38.147) 56(84) bytes of data. 
       
      --- 38.38.38.147 ping statistics --- 
      3 packets transmitted, 0 received, 100% packet loss, time 1999ms 
      

   4. Ping from the host on port 2 to the host on port 15.

       [root@nsn173-147 ~]# ping 38.38.38.70
       
      PING 38.38.38.70 (38.38.38.70) 56(84) bytes of data. 
      From 38.38.38.147 icmp_seq=1 Destination Host Unreachable 
      From 38.38.38.147 icmp_seq=2 Destination Host Unreachable 
      From 38.38.38.147 icmp_seq=3 Destination Host Unreachable 
      

   5. Ping from the host on port 15 to the host on port 1.

      [root@nsn173-70 ~]# ping 38.38.38.146
       
      PING 38.38.38.146 (38.38.38.146) 56(84) bytes of data. 
      64 bytes from 38.38.38.146: icmp_seq=1 ttl=255 time=1.48 ms 
      64 bytes from 38.38.38.146: icmp_seq=2 ttl=255 time=0.114 ms 
      64 bytes from 38.38.38.146: icmp_seq=3 ttl=255 time=0.091 ms 
      

   6. Ping from the host on port 20 to the host on port 1.

      nsn173-65:~ # ping 38.38.38.146 
       
      PING 38.38.38.146 (38.38.38.146) 56(84) bytes of data. 
      64 bytes from 38.38.38.146: icmp_seq=1 ttl=255 time=2.90 ms 
      64 bytes from 38.38.38.146: icmp_seq=2 ttl=255 time=0.136 ms 
      64 bytes from 38.38.38.146: icmp_seq=3 ttl=255 time=0.132 ms 
      

   7. Ping from the host on port 20 to the host on port 2.

      nsn173-65:~ # ping 38.38.38.147
       
      PING 38.38.38.147 (38.38.38.147) 56(84) bytes of data. 
      From 38.38.38.65: icmp_seq=1 Destination Host Unreachable 
      From 38.38.38.65 icmp_seq=1 Destination Host Unreachable 
      From 38.38.38.65 icmp_seq=2 Destination Host Unreachable 
      From 38.38.38.65 icmp_seq=3 Destination Host Unreachable 
      

   8. Ping from the host on port 15 to the host on port 20.

      [root@nsn173-64 ~]# ping 38.38.38.65
       
      PING 38.38.38.65 (38.38.38.65) 56(84) bytes of data. 
      From 38.38.38.64 icmp_seq=2 Destination Host Unreachable 
      From 38.38.38.64 icmp_seq=3 Destination Host Unreachable 
      From 38.38.38.64 icmp_seq=4 Destination Host Unreachable