Configure Restricted VLAN Registration

By default, restricted VLAN registration is disabled on a port. If restricted VLAN registration is enabled on a port, then the VLAN is learned dynamically on that port only if the specific VLAN is statically configured in the switch. If restricted VLAN registration rules are disabled, then GVRP packets are processed normally, and VLANs are learned dynamically even if they are not statically configured in the switch.

In the following procedure, P1 in switch A is configured as a member port of VLANs 2 and 3. See Default Settings for the example topology for this procedure.

1. Create VLAN 2 and VLAN 3 in switch A.

   SEFOS# config
   Configuring from memory or network is not supported
   SEFOS(config)# vlan 2
   SEFOS(config-if)# port ex 0/3 untagged ex 0/3
   SEFOS(config-if)# exit
   SEFOS(config)# vlan 3
   SEFOS(config-if)# port ex 0/3 untagged ex 0/3
   SEFOS(config-if)# end

2. Review the VLAN output in switch A.

   SEFOS# show vlan
   VLAN database
   -------------
   VLAN ID             : 1
   Member Ports        : Ex0/1, Ex0/2, Ex0/3, Ex0/4, Ex0/5, Ex0/6
   Ex0/7, Ex0/8, Ex0/9, Ex0/10, Ex0/11, Ex0/12
   Ex0/13, Ex0/14, Ex0/15, Ex0/16, Ex0/17, Ex0/18
   Ex0/19, Ex0/20, Ex0/21, Ex0/22, Ex0/23, Ex0/24
   Untagged Ports      : Ex0/1, Ex0/2, Ex0/3, Ex0/4, Ex0/5, Ex0/6
   Ex0/7, Ex0/8, Ex0/9, Ex0/10, Ex0/11, Ex0/12
   Ex0/13, Ex0/14, Ex0/15, Ex0/16, Ex0/17, Ex0/18
   Ex0/19, Ex0/20, Ex0/21, Ex0/22, Ex0/23, Ex0/24
   Forbidden Ports     : None
   Name                :
   Status              : Permanent
   ----------------------------------------------------
   VLAN ID             : 2
   Member Ports        : Ex0/3
   Untagged Ports      : Ex0/3
   Forbidden Ports     : None
   Name                :
   Status              : Permanent
   ----------------------------------------------------
   VLAN ID             : 3
   Member Ports        : Ex0/3
   Untagged Ports      : Ex0/3
   Forbidden Ports     : None
   Name                :
   Status              : Permanent

3. Review the VLAN output in switch B.

   SEFOS# show vlan
   VLAN database
   -------------
   VLAN ID             : 1
   Member Ports        : Ex0/1, Ex0/2, Ex0/3, Ex0/4, Ex0/5, Ex0/6
   Ex0/7, Ex0/8, Ex0/9, Ex0/10, Ex0/11, Ex0/12
   Ex0/13, Ex0/14, Ex0/15, Ex0/16, Ex0/17, Ex0/18
   Ex0/19, Ex0/20, Ex0/21, Ex0/22, Ex0/23, Ex0/24
   Untagged Ports      : Ex0/1, Ex0/2, Ex0/3, Ex0/4, Ex0/5, Ex0/6
   Ex0/7, Ex0/8, Ex0/9, Ex0/10, Ex0/11, Ex0/12
   Ex0/13, Ex0/14, Ex0/15, Ex0/16, Ex0/17, Ex0/18
   Ex0/19, Ex0/20, Ex0/21, Ex0/22, Ex0/23, Ex0/24
   Forbidden Ports     : None
   Name                :
   Status              : Permanent
   ----------------------------------------------------
   VLAN ID             : 2
   Member Ports        : Ex0/3
   Untagged Ports      : None
   Forbidden Ports     : None
   Name                :
   Status              : Dynamic Gvrp
   -------------------------------------------
   VLAN ID             : 3
   Member Ports        : Ex0/3
   Untagged Ports      : None
   Forbidden Ports     : None
   Name                :
   Status              : Dynamic Gvrp
   ---------------------------------------------

   See Configure Dynamic VLAN Learning on how to enable GVRP. When GVRP is enabled, VLAN 2 and 3 are learned from switch A, as indicated by the dynamic GVRP attribute.

4. Enable restricted VLAN registration in switch B.

   SEFOS# configure terminal
   SEFOS(config)# interface extreme-ethernet 0/3
   SEFOS(config-if)# vlan restricted enable
   SEFOS(config-if)# end

5. Review the configuration details after enabling VLAN registration.

   SEFOS# show vlan
   VLAN database
   -------------
   VLAN ID             : 1
   Member Ports        : Ex0/1, Ex0/2, Ex0/3, Ex0/4, Ex0/5, Ex0/6
   Ex0/7, Ex0/8, Ex0/9, Ex0/10, Ex0/11, Ex0/12
   Ex0/13, Ex0/14, Ex0/15, Ex0/16, Ex0/17, Ex0/18
   Ex0/19, Ex0/20, Ex0/21, Ex0/22, Ex0/23, Ex0/24
   Untagged Ports      : Ex0/1, Ex0/2, Ex0/3, Ex0/4, Ex0/5, Ex0/6
   Ex0/7, Ex0/8, Ex0/9, Ex0/10, Ex0/11, Ex0/12
   Ex0/13, Ex0/14, Ex0/15, Ex0/16, Ex0/17, Ex0/18
   Ex0/19, Ex0/20, Ex0/21, Ex0/22, Ex0/23, Ex0/24
   Forbidden Ports     : None
   Name                :
   Status              : Permanent
   ----------------------------------------------------

6. Create VLAN 2 in switch B, and review the VLAN details.

   SEFOS# configure terminal
   SEFOS(config)# vlan 2
   SEFOS(config-vlan)# ports extreme-ethernet 0/3
   SEFOS(config-vlan)# end
   SEFOS# show vlan
   VLAN database
   -------------
   VLAN ID             : 1
   Member Ports        : Ex0/1, Ex0/2, Ex0/3, Ex0/4, Ex0/5, Ex0/6
   Ex0/7, Ex0/8, Ex0/9, Ex0/10, Ex0/11, Ex0/12
   Ex0/13, Ex0/14, Ex0/15, Ex0/16, Ex0/17, Ex0/18
   Ex0/19, Ex0/20, Ex0/21, Ex0/22, Ex0/23, Ex0/24
   Untagged Ports      : Ex0/1, Ex0/2, Ex0/3, Ex0/4, Ex0/5, Ex0/6
   Ex0/7, Ex0/8, Ex0/9, Ex0/10, Ex0/11, Ex0/12
   Ex0/13, Ex0/14, Ex0/15, Ex0/16, Ex0/17, Ex0/18
   Ex0/19, Ex0/20, Ex0/21, Ex0/22, Ex0/23, Ex0/24
   Forbidden Ports     : None
   Name                :
   Status              : Permanent
   ----------------------------------------------------
   VLAN ID             : 2
   Member Ports        : Ex0/1, Ex0/3
   Untagged Ports      : None
   Forbidden Ports     : None
   Name                :
   Status              : Permanent

   The ex 0/3 interface might take a few minutes to show up in VLAN 2.

   ---

   Note - Because VLAN 2 is statically configured in switch B, VLAN 2 is learned dynamically on port 0/1 of switch B, even though restricted VLAN registration is enabled.

   ---