3Com WX2200 3CRWX220095A Switch User Manual

Configuring and Managing VLANs 95
The following commands restrict Layer 2 forwarding of client data in
VLAN abc_air to the default routers with MAC address aa:bb:cc:dd:ee:ff
and 11:22:33:44:55:66, and display restriction information and statistics:
WX1200# set security l2-restrict vlan abc_air mode enable
permit-mac aa:bb:cc:dd:ee:ff 11:22:33:44:55:66
success: change accepted.
WX1200# display security l2-restrict
VLAN Name En Drops Permit MAC Hits
---- ----------- -- ---------- ------------------- ----------
1 abc_air Y 0 aa:bb:cc:dd:ee:ff 5947
11:22:33:44:55:66 9
The En field indicates whether restriction is enabled. The Drops field
indicates how many packets were addressed directly from one client to
another and dropped by MSS. The Hits field indicates how many packets
the permitted default router has received from clients.
To reset the statistics counters, use the following command:
clear security l2-restrict counters [vlan vlan-id | all]
Displaying VLAN
To display VLAN configuration information, use the following command:
display vlan config [vlan-id]
To display information for VLAN burgundy, type the following command:
WX1200# display vlan config burgundy
Admin VLAN Tunl Port
VLAN Name Status State Affin Port Tag State
---- ---------------- ------ ----- ----- ---------------- ----- -----
2 burgundy Up Up 5
2 none Up
3 none Up
4 none Up
6 none Up
4094 web-aaa Up Up 0
2 4094 Up
The display can include MAP access ports and wired authentication ports,
because MSS dynamically adds these ports to a VLAN when handling user
traffic for the VLAN.
(For information about the fields in the output, see the Wireless LAN
Switch and Controller Command Reference.)