Article ID: 5283
Products
DFE
Matrix N-Series
Protocols/Features
VLAN
GVRP
SNMP
MIBs
Commands
'show vlan'
'show vlan static'
Goals
Display all port and 802.1q vlan relationships
Display static egress permissions
Display gvrp egress permissions
Display dynamic egresss permissions
Symptoms
Not all ports shown
Cause
Using a 'show vlan' or 'show vlan
' command, all static / GVRP / dynamic egress permissions are listed for forwarding (with link up, and forwarding traffic) ports only. Note that GVRP (5237) is globally enabled, by default.
Using an alternate form of the command, 'show vlan static' or 'show vlan static ', allstatic egress permissions are listed for all ports.
Selectively use either or both command formats to develop the most useful picture of the VLAN/port egress permissions.
A comparative example is shown here:
DFE(su)->show vlan
VLAN: 1 NAME: DEFAULT VLAN Status: Enabled
VLAN Type: Permanent FID: 1
Creation Time: 15 days 13 hours 12 minutes 44 seconds ago
Egress Ports
host.0.1;fe.1.1;rtr.1.1
Forbidden Egress Ports
None.
Untagged Ports
host.0.1;fe.1.1;rtr.1.1
VLAN: 44 NAME: Status: Enabled
VLAN Type: Permanent FID: 44
Creation Time: 15 days 13 hours 12 minutes 44 seconds ago
Egress Ports
rtr.1.1
Forbidden Egress Ports
None.
Untagged Ports
None.
DFE(su)->show vlan static
VLAN: 1 NAME: DEFAULT VLAN Status: Enabled
VLAN Type: Permanent FID: 1
Creation Time: 15 days 13 hours 13 minutes 7 seconds ago
Egress Ports
host.0.1;fe.1.1-12;lag.0.1-32;rtr.1.1
Forbidden Egress Ports
None.
Untagged Ports
host.0.1;fe.1.1-12;lag.0.1-32;rtr.1.1
VLAN: 44 NAME: Status: Enabled
VLAN Type: Permanent FID: 44
Creation Time: 15 days 13 hours 13 minutes 8 seconds ago
Egress Ports
fe.1.13-24
Forbidden Egress Ports
None.
Untagged Ports
fe.1.13-24
DFE(su)->
The 'show port vlan' command lists, for all ports, the PVID assignments.
As of firmware 5.01.58, the 'show port egress' command lists, for all ports, the VLAN egress permissions using 'show vlan' rules. That is, it only includes ports that are in the forwarding state.
The egress permissions of the 'show vlan' and 'show port egress' commands are taken from
dot1qVlanCurrentEgressPorts=1.3.6.1.2.1.17.7.1.4.2.1.4
dot1qVlanCurrentUntaggedPorts=1.3.6.1.2.1.17.7.1.4.2.1.5
The egress permissions of the 'show vlan static' command are taken from
dot1qVlanStaticEgressPorts=1.3.6.1.2.1.17.7.1.4.3.1.2
dot1qVlanForbiddenEgressPorts=1.3.6.1.2.1.17.7.1.4.3.1.3
dot1qVlanStaticUntaggedPorts=1.3.6.1.2.1.17.7.1.4.3.1.4
As with the cli commands, there is no single SNMP-accessible source that will lay out the Static and Dynamic Egress states regardless of port forwarding state. Given the presence of Dynamic VLAN Egress and/or GVRP, for the full picture it is necessary to start with the Static MIB data and then append any Dynamic egress permissions found in the Current MIB data.
All of this behavior is RFC2674-compliant.
See 5441 for a discussion of rtr ports.
Solution
FAD (Functions as Designed) - to submit an enhancement request, click here.
