Users Guide
NOTE: You cannot configure an existing switchport or port channel interface for Native VLAN.
Interfaces must have no other Layer 2 or Layer 3 configurations when using the portmode hybrid
command or a message similar to this displays: % Error: Port is in Layer-2 mode Te
5/6.
To configure a port so that it can be a member of an untagged and tagged VLANs, use the following
commands.
1. Remove any Layer 2 or Layer 3 configurations from the interface.
INTERFACE mode
2. Configure the interface for Hybrid mode.
INTERFACE mode
portmode hybrid
3. Configure the interface for Switchport mode.
INTERFACE mode
switchport
4. Add the interface to a tagged or untagged VLAN.
VLAN INTERFACE mode
[tagged | untagged]
Creating a Port-Based VLAN
To configure a port-based VLAN, create the VLAN and then add physical interfaces or port channel (LAG)
interfaces to the VLAN.
NOTE: The Default VLAN (VLAN 1) is part of the system startup configuration and does not require
configuration.
A VLAN is active only if the VLAN contains interfaces and those interfaces are operationally up. As shown
in the following example, VLAN 1 is inactive because it does not contain any interfaces. The other VLANs
contain enabled interfaces and are active.
NOTE: In a VLAN, the shutdown command stops Layer 3 (routed) traffic only. Layer 2 traffic
continues to pass through the VLAN. If the VLAN is not a routed VLAN (that is, configured with an IP
address), the shutdown command has no affect on VLAN traffic.
When you delete a VLAN (using the no interface vlan vlan-id command), any interfaces assigned
to that VLAN are assigned to the Default VLAN as untagged interfaces.
To create a port-based VLAN, use the following command.
• Configure a port-based VLAN (if the VLAN-ID is different from the Default VLAN ID) and enter
INTERFACE VLAN mode.
CONFIGURATION mode
interface vlan vlan-id
To activate the VLAN, after you create a VLAN, assign interfaces in Layer 2 mode to the VLAN.
Example of Verifying a Port-Based VLAN
To view the configured VLANs, use the show vlan command in EXEC Privilege mode.
Virtual LANs (VLANs)
1039