GVRP forbidden registration mode configuration example

As shown in Figure 61:

• Device A and Device B are connected through their ports GigabitEthernet 1/0/1.

• Enable GVRP and configure the forbidden registration mode on ports to prevent the registration and deregistration of all VLANs but VLAN 1 between the two devices.

1. Configure Device A:

   # Enable GVRP globally.

   <DeviceA> system-view
   [DeviceA] gvrp
   

   # Configure port GigabitEthernet 1/0/1 as a trunk port, and assign it to all VLANs.

   [DeviceA] interface gigabitethernet 1/0/1
   [DeviceA-GigabitEthernet1/0/1] port link-type trunk
   [DeviceA-GigabitEthernet1/0/1] port trunk permit vlan all
   

   # Enable GVRP on GigabitEthernet 1/0/1, and set the GVRP registration mode to forbidden on the port.

   [DeviceA-GigabitEthernet1/0/1] gvrp
   [DeviceA-GigabitEthernet1/0/1] gvrp registration forbidden
   [DeviceA-GigabitEthernet1/0/1] quit
   

   # Create VLAN 2 (a static VLAN).

   [DeviceA] vlan 2
   [DeviceA-vlan2] quit
   

2. Configure Device B:

   # Enable GVRP globally.

   <DeviceB> system-view
   [DeviceB] gvrp
   

   # Configure port GigabitEthernet 1/0/1 as a trunk port, and assign it to all VLANs.

   [DeviceB] interface gigabitethernet 1/0/1
   [DeviceB-GigabitEthernet1/0/1] port link-type trunk
   [DeviceB-GigabitEthernet1/0/1] port trunk permit vlan all
   

   # Enable GVRP on GigabitEthernet 1/0/1, and set the GVRP registration mode to forbidden on the port.

   [DeviceB-GigabitEthernet1/0/1] gvrp
   [DeviceB-GigabitEthernet1/0/1] gvrp registration forbidden
   [DeviceB-GigabitEthernet1/0/1] quit
   

   # Create VLAN 3 (a static VLAN).

   [DeviceB] vlan 3
   [DeviceB-vlan3] quit
   

3. Verify the configuration:

   Use the display gvrp local-vlan command to display the local VLAN information that GVRP maintains on ports. For example:

   # Display the local VLAN information that GVRP maintains on port GigabitEthernet 1/0/1 of Device A.

   [DeviceA] display gvrp local-vlan interface gigabitethernet 1/0/1
    Following VLANs exist in GVRP local database:
     1(default)
   

   According to the output, information about VLAN 1 is registered through GVRP, but static VLAN information of VLAN 2 on the local device and dynamic VLAN information of VLAN 3 on Device B are not.

   # Display the local VLAN information that GVRP maintains on port GigabitEthernet 1/0/1 of Device B.

   [DeviceB] display gvrp local-vlan interface gigabitethernet 1/0/1
    Following VLANs exist in GVRP local database:
     1(default)
   

   According to the output, information about VLAN 1 is registered through GVRP, but static VLAN information of VLAN 3 on the local device and dynamic VLAN information of VLAN 2 on Device A are not.