Configuring Restricted VLAN Registration

By default, restricted VLAN registration is disabled on a port. If restricted VLAN registration is enabled on a port, VLAN is learnt dynamically on that port, only if the specific VLAN is statically configured in the switch. When restricted VLAN registration rules are disabled, GVRP packets are processed normally and VLANs are learnt dynamically even if they are not statically configured in the switch. For Setup, refer to section Configuration Topology. In Switch A, P1 is configured to be member port of VLANs 2 and 3.

  1. Execute the following commands in Switch A.
    perform the following:
    iSCom# configure terminal
    • Enable VLAN 2.
    iSCom(config)# vlan 2
    iSCom(config-vlan)# port gigabitethernet 0/1 untagged gigabitethernet 0/1
    iSCom(config-vlan)# exit
    iSCom(config)# vlan 3
    iSCom(config-vlan)# port gigabitethernet 0/1 untagged gigabitethernet 0/1
    • Exit from the Interface Configuration Mode
    iSCom(config-vlan)# end
  2. Review the configuration in Switch A.
    perform the following:
    iSCom# show vlan 
    Vlan database
    -------------
    Vlan ID             : 1
    Member Ports        : Gi0/1, Gi0/2, Gi0/3, Gi0/4, Gi0/5, Gi0/6
    Gi0/7, Gi0/8, Gi0/9, Gi0/10, Gi0/11, Gi0/12
    Gi0/13, Gi0/14, Gi0/15, Gi0/16, Gi0/17, Gi0/18
    Gi0/19, Gi0/20, Gi0/21, Gi0/22, Gi0/23, Gi0/24
    Ex0/1, Ex0/2, Ex0/3, Ex0/4
    
    
    Untagged Ports      : Gi0/1, Gi0/2, Gi0/3, Gi0/4, Gi0/5, Gi0/6
    Gi0/7, Gi0/8, Gi0/9, Gi0/10, Gi0/11, Gi0/12
    Gi0/13, Gi0/14, Gi0/15, Gi0/16, Gi0/17, Gi0/18
    Gi0/19, Gi0/20, Gi0/21, Gi0/22, Gi0/23, Gi0/24
    Ex0/1, Ex0/2, Ex0/3, Ex0/4
    Forbidden Ports     : None
    Name                :
    Status              : Permanent
    Egress Ethertype    : 0x8100
    Service Loopback Status   : Disabled
    ----------------------------------------------------
    Vlan ID             : 2
    Member Ports        : Gi0/1
    Untagged Ports      : Gi0/1
    Forbidden Ports     : None
    Name                :
    Status              : Permanent
    Egress Ethertype    : 0x8100
    Service Loopback Status   : Disabled
    ----------------------------------------------------
    Vlan ID             : 3
    Member Ports        : Gi0/1
    Untagged Ports      : Gi0/1
    Forbidden Ports     : None
    Name                :
    Status              : Permanent
    Egress Ethertype    : 0x8100
    Service Loopback Status   : Disabled----------------------------------------------------

    check the output in Switch B:
    iSCom# show vlan 
    Vlan database
    -------------
    Vlan ID             : 1
    Member Ports        : Gi0/1, Gi0/2, Gi0/3, Gi0/4, Gi0/5, Gi0/6
    Gi0/7, Gi0/8, Gi0/9, Gi0/10, Gi0/11, Gi0/12
    Gi0/13, Gi0/14, Gi0/15, Gi0/16, Gi0/17, Gi0/18
    Gi0/19, Gi0/20, Gi0/21, Gi0/22, Gi0/23, Gi0/24
    Ex0/1, Ex0/2, Ex0/3, Ex0/4
    
    
    Untagged Ports      : Gi0/1, Gi0/2, Gi0/3, Gi0/4, Gi0/5, Gi0/6
    Gi0/7, Gi0/8, Gi0/9, Gi0/10, Gi0/11, Gi0/12
    Gi0/13, Gi0/14, Gi0/15, Gi0/16, Gi0/17, Gi0/18
    Gi0/19, Gi0/20, Gi0/21, Gi0/22, Gi0/23, Gi0/24
    Ex0/1, Ex0/2, Ex0/3, Ex0/4
    Forbidden Ports     : None
    Name                :
    Status              : Dynamic Gvrp
    Egress Ethertype    : 0x8100
    Service Loopback Status   : Disabled
    ----------------------------------------------------
    Vlan ID             : 2
    Member Ports        : Gi0/1
    Untagged Ports      : Gi0/1
    Forbidden Ports     : None
    Name                :
    Status              : Dynamic Gvrp
    Egress Ethertype    : 0x8100
    Service Loopback Status   : Disabled
    ----------------------------------------------------
    Vlan ID             : 3
    Member Ports        : Gi0/3
    Untagged Ports      : Gi0/3
    Forbidden Ports     : None
    Name                :
    Status              : Dynamic Gvrp
    Egress Ethertype    : 0x8100
    Service Loopback Status   : Disabled----------------------------------------------------
  3. Execute the following commands in Switch B to enable restricted VLAN registration.
    perform the following:
    iSCom# configure terminal
    • Enable Restricted VLAN registration on a port.
    iSCom(config)# interface gigabitethernet 0/1
    iSCom(config-if)# vlan restricted enable
    iSCom(config-vlan)# end
  4. View the configuration details after enabling the VLAN registration
    iSCom# show vlan
    Vlan database
    -------------
    Vlan ID             : 1
    Member Ports        : Gi0/1, Gi0/2, Gi0/3, Gi0/4, Gi0/5, Gi0/6 
    Gi0/7, Gi0/8, Gi0/9, Gi0/10, Gi0/11, Gi0/12
    Gi0/13, Gi0/14, Gi0/15, Gi0/16, Gi0/17, Gi0/18                      Gi0/19, Gi0/20, Gi0/21, Gi0/22, Gi0/23, Gi0/24                      Ex0/1, Ex0/2, Ex0/3, Ex0/4
    Untagged Ports      : Gi0/1, Gi0/2, Gi0/3, Gi0/4, Gi0/5, Gi0/6                      Gi0/7, Gi0/8, Gi0/9, Gi0/10, Gi0/11, Gi0/12                      
    Gi0/13, Gi0/14, Gi0/15, Gi0/16, Gi0/17, Gi0/18                      Gi0/19, Gi0/20, Gi0/21, Gi0/22, Gi0/23, Gi0/24                      Ex0/1, Ex0/2, Ex0/3, Ex0/4
    Forbidden Ports     : None
    Name                :
    Status              : Permanent
    Egress Ethertype    : 0x8100
    Service Loopback Status   : Disabled
    ----------------------------------------------------
  5. Create VLAN 2 in Switch B.
    perform the following:
    iSCom# configure terminal
    • Create VLAN 2.
    iSCom(config)# vlan 2
    iSCom(config-vlan)# port gigabitethernet 0/2 
    • Exit from the Interface Configuration Mode
    iSCom(config-vlan)# end
  6. View the configuration details in Switch B.
    iSCom# show vlan
    Vlan database
    -------------
    Vlan ID             : 1
    Member Ports        : Gi0/1, Gi0/2, Gi0/3, Gi0/4, Gi0/5, Gi0/6
    Gi0/7, Gi0/8, Gi0/9, Gi0/10, Gi0/11, Gi0/12
    Gi0/13, Gi0/14, Gi0/15, Gi0/16, Gi0/17, Gi0/18
    Gi0/19, Gi0/20, Gi0/21, Gi0/22, Gi0/23, Gi0/24
    Ex0/1, Ex0/2, Ex0/3, Ex0/4
    
    
    Untagged Ports      : Gi0/1, Gi0/2, Gi0/3, Gi0/4, Gi0/5, Gi0/6
    Gi0/7, Gi0/8, Gi0/9, Gi0/10, Gi0/11, Gi0/12
    Gi0/13, Gi0/14, Gi0/15, Gi0/16, Gi0/17, Gi0/18
    Gi0/19, Gi0/20, Gi0/21, Gi0/22, Gi0/23, Gi0/24
    Ex0/1, Ex0/2, Ex0/3, Ex0/4
    Forbidden Ports     : None
    Name                :
    Status              : Permanent
    Egress Ethertype    : 0x8100
    Service Loopback Status   : Disabled
    ----------------------------------------------------
    VLAN ID             : 2
    Member Ports        : Gi0/1, Gi0/2
    Untagged Ports      : None
    Forbidden Ports     : None
    Name                :
    Status              : Permanent
    Note: Since VLAN 2 is statically configured in Switch B, VLAN 2 is learnt dynamically on Port 1 of Switch B, even though restricted VLAN registration is enabled.