interface range

interface range gigabitethernet //-/

ip access-group {in|out|session {vlan }}

lacp

lldp

no

年代hutdown

年代witchport {access vlan |mode {access|trunk}|trunk {allowed vlan {|add |all|except |remove }|

native vlan }}

trusted {vlan }

Description

This command configures a range of GigabitEthernet interfaces on themanaged device.

Parameter

Description

range

Range of Ethernet ports in the format //-. where // is the interface.

duplex

Transmission mode on the interface: full- or half-duplex or auto to automatically adjust transmission.

Range:auto/full/half

Default:auto

ip access-group

Applies the specified ACL to the interface. Use the ip access-list command to configure an ACL.

in

Applies ACL to interface’s inbound traffic.

out

Applies ACL to interface’s outbound traffic.

年代ession

Applies session ACL to interface and optionally to a selected VLAN associated with this range of ports.

lacp

Configure an LACP group to the interface.

group mode [active|passive]

Enter the LAG number (0-7) and specify the mode (activeorpassive).

  1. Active mode—the interface is in active negotiating state. LACP runs on any link that is configured to be in the active state. The port in an active mode also automatically initiates negotiations with other ports by initiating LACP packets.
  2. Passive mode—the interface is not in an active negotiating state. LACP runs on any link that is configured in a passive state. The port in a passive mode responds to negotiations requests from other ports that are in an active state. Ports in passive state respond to LACP packets.

port-priority

Enter the port-priority value. The higher the value, the lower the priority.

Range:1-65535

Default:255

timeout

Enter the keywordlongto set the LACP session to 90 seconds.

Enter the keyword年代hortto set the LACP session to 3 seconds.

Default:90

lldp

Configures an LLDP functionality on an interface.

fast-transmit-counter

Set the number of the LLDP data units sent each time fast LLDP data unit transmission is triggered.

Range:1-8

Default:4

fast-transmit-interval

Set the LLDP fast transmission interval in seconds.

Range:1-3600

Default:1

med

使地中海LLDP协议。

Default:disabled

receive

Enables processing of LLDP PDU received.

Default:disabled

transmit

Enables LLDP PDU transmit.

Default:disabled

transmit-hold <1-100>

Set the transmit hold multiplier.

Range:1-100

Default:4

transmit-interval <1-3600>

Sets the transmit interval in seconds.

Range:1-3600

Default:30

no

Negates any configured parameter.

年代hutdown

Causes a hard shutdown of the interface.

年代witchport

Sets switching mode parameters for the interface.

access vlan

Sets the interface as an access port for the specified VLAN. The interface carries traffic only for the specified VLAN.

mode

Sets the mode of the interface to access or trunk mode only.

trunk {allowed vlan

{|add |all|except |remove }|native vlan }}

Sets the interfaces as trunk ports for the specified VLANs. A trunk port carries traffic for multiple VLANs using 802.1q tagging to mark frames for specific VLANs. You can include all VLANs configured on themanaged device, or add or remove specified VLANs. Optionally you can specify the native VLAN for the trunk mode interface. Frames on the native VLAN are not 802.1q tagged.

trusted

Set this interface and range of VLANs to be trusted. VLANs not included in the trusted range of VLANs will be, by default, untrusted.

Trusted ports and VLANs are typically connected to internal controlled networks, while untrusted ports connect to third-party APs, public areas, or other networks to which access controls should be applied. WhenArubaAPs are attached directly to themanaged device,将端口设置为可信。

Default:enabled

vlan

Sets the specified range of VLANs as trusted. All remaining become untrusted automatically.

For example, If you set a VLAN range as:
vlan 1-10, 100-300, 301, 305-400, 501-4094

Then all VLANs in this range are trusted and all others become untrusted by default. You can also use theno trusted vlancommand to explicitly make an individual VLAN untrusted. The no trusted vlan command is additive and adds given vlans to the existing untrusted vlan set.

However, if you execute thetrusted vlan<word> command, it overrides any earlier untrusted VLANs or a range of untrusted VLANs and creates a new set of trusted VLANs.

Range:1-4094

NOTE:A port supports a user VLAN range from 1-4094. If you want to set all VLANs (1-4094) on a port as untrusted then mark the port itself as untrusted. By default the port and all its associated VLANs are trusted.

Example

下面的g command configures a range of interface as a trunk port for a set of VLANs:

(host) [00:0b:86:99:88:17] (config) #interface range gigabitethernet 0/0/0-0/17

(host) [00:0b:86:99:88:17] (config-submode)#switchport mode trunk

(host) [00:0b:86:99:88:17] (config-submode)#switchport trunk native vlan 10

(host) [00:0b:86:99:88:17] (config-submode)#switchport trunk allowed vlan 1,10,100

Related Commands

Command

Description

年代how port status

This command displays information about the interfaces available on themanaged device. You can execute this command only on a hardware platform that acts as amanaged deviceor as a stand-alonecontroller.

Command History

Release

Modification

ArubaOS8.2.0.0

Updated the new syntax asip access-group {in|out|session {vlan }} .

ArubaOS8.0.0.0

Command introduced.

Command Information

Platforms

License

Command Mode

All platforms

Base operating system.

Config mode onMobility Conductor.