Calix Community  
 
Reply
Subscriber
Posts: 1
Registered: ‎11-23-2015
0

Trying to turn an e5-306 into a switch whit native VLAN on trunk along with untagged access ports.

Trying to turn an e5-306 into a switch whit native VLAN on trunk  along with untagged access ports.

Highlighted
Moderator
Posts: 81
Registered: ‎03-27-2012

Re: Trying to turn an e5-306 into a switch whit native VLAN on trunk along with untagged access ports.

Rodney - 

 

Unfortunately, per the release notes, we do not currently support a Native VLAN on the E5-30X / E5-520 hardware.  Per the release notes:

 

The E5-30x/E5-520 does not support a native VLAN. (EXA-4528)

 

Regarding untagged access ports, you'd just need a few things:

 

  • A service-profile, that will configure VLAN based security (DHCP Snoop, MAC Forced Forwarding, etc), as well as different levels of bandwidth as appropriate
  • A service-instance, that will define the VLAN for the ingress traffic to be tagged with
  • A match-list, configured to match untagged traffic.

Here's a straightforward example - first a matchlist:

 

E5-306# show running-config match-list untagged
match-list untagged
match-rule 1 match untagged
!

 

Next, a service profile with some security enabled:

 

E5-306# show running-config service-profile HSI
service-profile HSI
dhcp-profile SNOOP
source-verify ENABLED
mff ENABLED
!

 

Finally, if we wanted to use a VLAN of 1000, we'd have a service instance defined as follows:

 

E5-306# show running-config service-instance HSI_DATA
service-instance HSI_DATA 1000 HSI

 

At this point you'll just need to configure a port as a uni, with that service-instance and that match list:

 

E5-306# show running-config interface ethernet e2
interface ethernet e2
no shutdown
service-role uni
service HSI_DATA
match-list untagged
no shutdown
!

!
!

 

Ingress untagged traffic will have a VLAN ID of 1000 added.  You'd just need to add 1000 to the transport-service-profile being used on your trunk, and you'll be set for access ports on that VLAN.

 

-Greg