VLAN Properties

The VLAN Properties Is used to create new VLANs for use in the system.  Users are able to set the following attributes per VLAN.

System VLAN Properties Attributes

• Command Path – tolt>system>vlan>properties>
• Module – tolt
• Container – system
• Container – vlan
• Container – properties
• Types – 
  • *Vlan-id – VLAN ID to be added/modified
    • full (default) | private-vlan | tls
  • Bridge-type – Most VLANs will be of type full bridged and the default can be used.  Private vlan creates a vlan that allows UNI ports to communicate upstream to servers, but not between uni ports on the system.  Isolates UNI port users from each other.  TLS does an unconditional push of a vlan tag onto traffic for transparent transport of a UNI port to another location.  .
    • Single 
  • Acl-mode – When set to disabled, the VLAN is open and acts as a normal Layer 2 switch. 

    Basic ACL default deny will all traffic on the VLAN and requires a basic ACL to allow access to the VLAN.  Extended ACLs are not allowed.

    default-accept will accept all traffic by default and forward it and allows extended ACLs to deny specific traffic.

    default-drop will deny all traffic by default and an ACL is required to allow access for specific traffic.

    • basic | default-accept | default-drop | disabled (default)
  • Description – Allows user to set the Name or description of the VLAN.
    • string
  • Enable-dai – Allows the user to enable Dynamic ARP inspection to look for Layer 2 spoofing type attacks.
    • true | false (defaultl)
  • Stp-id – By default is set to be associated with the common spanning tree (0).  Assigning a vlan to STP IDs 1..8 associate it with one of the eight possible MSTI (Multiple Spanning Tree Instances).
    • 0..8 (default 0

VLAN Create Example

A VLAN must be created prior to it being u)tilized in a service profile or being assigned to an uplink.  A VLAN can be created as follows:

• Command Path – tolt>system>vlan>properties>
• Module – tolt
• Container – system
• Container – vlan
• Container – properties
• Type – Example Parameter
  • Vlan-id – 3000

1. From the MDS1-ESUA(Config)# command line, input tolt system vlan properties 3000, and press Enter. 
2. Input commit, and press Enter. Outputs similar to the following are displayed:

MDS1-ESUA(Config)# tolt system vlan properties 3000 <enter>
MDS1-ESUA(config-properties-3000)# commit <enter>
Commit complete.
MDS1-ESUA(config-properties-3000)# exit <enter>
MDS1-ESUA(Config)# _

Create Private VLAN

Private VLAN allows north/south traffic between servers above the OLT and clients on UNI ports.  Private VLAN denies east/west traffic between any two UNI ports.

• Command Path – tolt>system>vlan>properties>
• Module – tolt
• Container – system
• Container – vlan
• Container – properties
• Types – Example Parameters
  • Vlan-id – 3000
  • bridge-type private-vlan

1. From the MDS1-ESUA(Config)# command line, input tolt system vlan properties 3000, and press Enter. 
2. Input bridge-type private-vlan, and press Enter. 
3. Input commit and press Enter. Outputs similar to the following are displayed:

MDS1-ESUA(Config)# tolt system vlan properties 3000 <enter>
MDS1-ESUA(config-properties-3000)# bridge-type private-vlan <enter>
MDS1-ESUA(config-properties-3000)# commit <enter>
Commit complete.
MDS1-ESUA(config-properties-3000)# exit <enter>
MDS1-ESUA(Config)# _

VLAN Delete Example

A VLAN cannot be assigned to any UNI port or uplink or an attempt to delete the VLAN will be denied.

• Command Path – no>olt>system>vlan>properties>
• Module – tolt
• Container – system
• Container – vlan
• Container – properties
• Type – Example Parameter
  • Vlan-id – 3000

1. From the MDS1-ESUA(Config)# command line, input no tolt system vlan properties 3000, and press Enter. 
2. Input commit, and press Enter. 
3. Input commit and press Enter. Outputs similar to the following are displayed:

MDS1-ESUA(Config)# no tolt system vlan properties 3000 <enter>
MDS1-ESUA(config)# commit <enter>
Commit complete.
MDS1-ESUA(Config)# _

Enable DAI Example

• Command Path – tolt>system>vlan>properties>
• Module – tolt
• Container – system
• Container – vlan
• Container – properties
• Types  – Example Parameters
  • Vlan-id – 3000
  • enable-dai true

1. From the MDS1-ESUA(Config)# command line, input tolt system vlan properties 3000, and press Enter.
2. Input enable-dai true, and press Enter. 
3. Input commit and press Enter. Outputs similar to the following are displayed:

MDS1-ESUA(Config)# tolt system vlan properties 3000 <enter>
MDS1-ESUA(config-properties-3000)# enable-dai true <enter>  
MDS1-ESUA(config-properties-3000)# commit <enter>
Commit complete.
MDS1-ESUA(config-properties-3000)# exit <enter>
MDS1-ESUA(Config)# _