R3721-F3210-F3171-HP High-End Firewalls Network Management Command Reference-6PW101

59
port trunk permit vlan
Syntax
port trunk permit vlan { vlan-id-list | all }
undo port trunk permit vlan { vlan-id-list | all }
View
Ethernet interface view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
vlan-id-list: Specifies a list of VLANs that the trunk ports will be assigned to, in the format of [vlan-id1 [ to
vlan-id2 ] ]&<1-10>, where vlan-id ranges from 1 to 4094 and &<1-10> indicates that you can specify up
to 10 VLAN IDs or VLAN ID ranges.
all: Permits all VLANs to pass through the trunk ports. On GVRP-enabled trunk ports, you must configure
the port trunk permit vlan all command to make sure that the traffic of all dynamically registered VLANs
can pass through. To prevent unauthorized VLAN users from accessing restricted resources through a
GVRP-disabled port, do not use the port trunk permit vlan all command on the port.
Description
Use port trunk permit vlan to assign the trunk ports to the specified VLANs.
Use undo port trunk permit vlan to remove the trunk ports from the specified VLANs.
By default, a trunk port allows only packets from VLAN 1 to pass through.
A trunk port can carry multiple VLANs. If you execute the port trunk permit vlan command multiple times,
the trunk port carries the set of VLANs specified by vlan-id-list in each execution.
On a trunk port, only traffic of the PVID can pass through untagged.
The configuration made in Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports.
• If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
• If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Related commands: port link-type.
Examples
# Assign the trunk port GigabitEthernet 0/1 to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] port link-type trunk
[Sysname-GigabitEthernet0/1] port trunk permit vlan 2 4 50 to 100
Please wait........... Done.
# Assign the trunk Layer 2 aggregate interface Bridge-Aggregation 1 to VLAN 2.
<Sysname> system-view