Assigning VLAN based on IP

sos · ‎09-14-2004

I am using a WS-C3550-48-SMI, it it possible to assign a Vlan based on IP, rather than port?

Terry

scottosan · ‎09-14-2004

Not by IP address, but you can configure it to dynamically assign VLAN by MAC address by using VPMS. According to Cisco, with VLAN Membership Policy Server (VMPS), switch ports can be assigned to VLANs dynamically, based on the source MAC address or user ID of the device connected to the port. When a host or user moves from a port on one switch in the network to a port on another switch in the network, the switch dynamically assigns the new port to the proper VLAN for that host.

When VMPS is enabled, a MAC address-to-VLAN mapping database downloads from a Trivial File Transfer Protocol (TFTP) server to the VMPS server (a Catalyst switch). The VMPS server then begins accepting client requests.

The VMPS client communicates with a VMPS server through the VLAN Query Protocol (VQP). When the VMPS receives a VQP request from a client switch, it searches its database for a MAC-address-to-VLAN mapping.

The server response is based on this mapping and whether or not the server is in secure mode. Secure mode determines whether the server shuts down the port when a VLAN is not allowed on it or just denies the port access to the VLAN.

pflunkert · ‎09-14-2004

annotation: The cat 3550 can't act as VPMS Server. You need a cat 6500 for example.

Unfortunately, what you want is not possible,

Regards

Peter

thiland · ‎09-14-2004

As far as I know, you only have 3 options for VLAN assignment:

Static -- manually set it on the port

Dynamic -- As another poster pointed out, assign the VLAN automatically based on MAC address

Dynamic -- Assign the VLAN dynamically using 802.1X port-based authentication. This option requires the clients to have a 802.1X client (e.g. WinXP, Win2k with the addon, etc.)