To set up dynamic VLANs for a segment:
-
Determine the VLAN topology required for each segment (broadcast domain) on the network.
-
Determine the VLANs that must be static and the VLANs that can be dynamically propagated.
-
Determine the devices on which static VLANs must be manually created in order to propagate VLANs throughout the segment.
-
Determine security boundaries and how the individual ports in the segment will handle dynamic VLAN advertisements. (See Options for handling unknown VLAN advertisements and Controlling VLAN behavior on ports with static VLANs )
-
Enable GVRP on all devices to be used with dynamic VLANs and configure the appropriate "Unknown VLAN" parameter (Learn, Block, or Disable) for each port.
-
Configure the static VLANs on the switches needed, along with the per-VLAN parameters (Tagged, Untagged, Auto, and Forbid—see Controlling VLAN behavior on ports with static VLANs )on each port.
-
Dynamic VLANs will now appear automatically, according to the configuration options you have chosen.
-
Convert dynamic VLANs to static VLANs where dynamic VLANs need to become permanent.