Description:

This article describes how VLAN is configured on a GS-3xxx series switch.

Please note how the different VLAN tagging modes work.


Requirements:


Scenario:


Procedure:

1) Connect to the web interface of the switch and navigate to the menu VLAN Management → VLAN Configuration.

2) Modify the following parameters:

In the case of Allowed VLANs, you can also specify non-contiguous ports by separating them with a comma (e.g. 1,3,5). You can also specify contiguous and non-contiguous ports in the same entry (e.g. 1,3,5-10).

Only the VLANs actually used must be entered for the Allowed VLANs, as otherwise this can lead to a dramatically increased CPU load of the switch.

3) In the field Allowed Access VLANs enter all VLAN IDs, which are used by ports with the tagging mode Access (in this example the VLAN-IDs 1-3). 

In the case of Allowed Access VLANs, you can also specify non-contiguous ports by separating them with a comma (e.g. 1,3,5). You can also specify contiguous and non-contiguous ports in the same entry (e.g. 1,3,5-10).

Only VLAN IDs which are assigned to a port with the tagging mode Access must be entered for the Allowed Access VLANs, as otherwise this can lead to a dramatically increased CPU load of the switch.

4) After completing the VLAN configuration, click Apply to keep the changes.

5) Change to the menu Maintenance → Configuration → Save Startup-config. Under File name, select the startup-config item and click on Save Configuration to set this configuration as the start configuration.

After restarting the switch, the start configuration is always loaded. If none is available, the default configuration will be loaded and the switch starts in its factory state.

If no communication is possible in the VLAN 1 on a certain switch port, go to the menu VLAN Management → Private VLAN and make sure, that all ports are a member of the Private VLAN 1. When a Private VLAN has been created, a switch port must be a member of the respective VLAN as well as the corresponding Private VLAN for the communication to be possible. In the default configuration all switch ports are a member of the Private VLAN 1. Therefore only the VLAN 1 is affected unless additional Private VLANs are added.