User manual

AutoTracker VLANs
Page 22-4
Network Address Policies. Network address policies enable you to define membership in the
VLAN on the basis of network address criteria.
For example, you can specify that all
IP users with a specific subnet mask be included in the
VLAN. Or, you can specify that all IPX users in a specific network address area using a certain
encapsulation type be included in the VLAN.
If you define network address and port or protocol rules in the same
VLAN, the network
address rules will take precedence over the port and protocol rules should any conflict arise.
To reverse this precedence (i.e., port and protocol rules take precedence over network
address rules) you must add the following line to the switch’s mpx.cmd file:
Precedence=0
User-Defined Policies. User-defined policies enable you to define membership in the VLAN on
the basis of a specific pattern within a frame. All devices that originate frames containing this
pattern are assigned to the VLAN. The pattern is specified by defining an offset, a value, and a
mask.
Port Binding Policies. A port binding policy specifies a particular device to be included in the
mobile group or AutoTracker VLAN. You can bind a device’s IP address to a switch port and
a MAC address, or bind a device’s MAC address to a protocol and a switch port.
DHCP Port Policies. These policies are similar to standard port policies, but apply to switch
ports to which DHCP client workstations are attached.
DHCP MAC Address Policies. These policies are similar to standard MAC address policies, but
apply to the MAC addresses of DHCP client workstations only.
The Default VLAN
The default AutoTracker VLAN, also referred to as VLAN #1, is different from other AutoTracker
VLANs. The following list outlines some of these differences.
1. The default
VLAN is automatically created when you create a new Group. Non-default
VLANs must be created through the cratvl command.
2. The default
VLAN cannot be removed. Other VLANs can be removed through the rmatvl
command.
3. You cannot apply AutoTracker policies to the default VLAN. Other non-default
AutoTracker VLANs allow you to apply any policy to them.
You can enable routing on the default VLAN. You enable the default VLAN virtual router
through the
crgp or modvl command. See Chapter 19, “Managing Groups and Ports,” for
further information on the virtual router port on the default VLAN.
All ports and devices in a Group initially belong to default
VLAN #1. All physical switch ports
always remain members of the default VLAN, but they can also become members of other
VLANs. It is not possible to delete a physical switch port from VLAN #1. Individual network
devices, however, can move out of VLAN #1. All MAC devices are also initially part of default
VLAN #1. However, when a MAC device is removed from default VLAN #1 and moved into a
non-default VLAN, it is deleted from default VLAN #1.
The default VLAN is explained further in other sections of this chapter. See How Devices are
Assigned to AutoTracker VLANs on page 22-5 for a discussion of default VLAN membership
issues and the
defvl command. Also, see Application Example 4 in Chapter 24, “AutoTracker
VLAN Application Examples,” for discussions of routing issues and the default VLAN.