Chapter 13
Configuring VLANs
Dynamic-access ports can be used for direct host connections, or they can connect to a network. A
maximum of 20 MAC addresses are allowed per port on the switch. A dynamic-access port can belong
to only one VLAN at a time, but the VLAN can change over time, depending on the MAC addresses seen.
Default VMPS Client Configuration
Table 13-6
Table 13-6
Feature
VMPS domain server
VMPS reconfirm interval
VMPS server retry count
Dynamic-access ports
VMPS Configuration Guidelines
These guidelines and restrictions apply to dynamic-access port VLAN membership:
•
•
•
•
•
•
•
•
•
•
Configuring the VMPS Client
You configure dynamic VLANs by using the VMPS (server). The switch can be a VMPS client; it cannot
be a VMPS server.
OL-13018-01
shows the default VMPS and dynamic-access port configuration on client switches.
Default VMPS Client and Dynamic-Access Port Configuration
You should configure the VMPS before you configure ports as dynamic-access ports.
When you configure a port as a dynamic-access port, the spanning-tree Port Fast feature is
automatically enabled for that port. The Port Fast mode accelerates the process of bringing the port
into the forwarding state.
IEEE 802.1x ports cannot be configured as dynamic-access ports. If you try to enable IEEE 802.1x
on a dynamic-access (VQP) port, an error message appears, and IEEE 802.1x is not enabled. If you
try to change an IEEE 802.1x-enabled port to dynamic VLAN assignment, an error message appears,
and the VLAN configuration is not changed.
Trunk ports cannot be dynamic-access ports, but you can enter the switchport access vlan dynamic
interface configuration command for a trunk port. In this case, the switch retains the setting and
applies it if the port is later configured as an access port.
You must turn off trunking on the port before the dynamic-access setting takes effect.
Dynamic-access ports cannot be monitor ports.
Secure ports cannot be dynamic-access ports. You must disable port security on a port before it
becomes dynamic.
Dynamic-access ports cannot be members of an EtherChannel group.
Port channels cannot be configured as dynamic-access ports.
The VTP management domain of the VMPS client and the VMPS server must be the same.
The VLAN configured on the VMPS server should not be a voice VLAN.
Default Setting
None
60 minutes
3
None configured
Cisco IE 3000 Switch Software Configuration Guide
Configuring VMPS
13-25