Configuring VMPS and Dynamic Port VLAN Membership
Creating the VMPS Database
To use VMPS, you first must create a VMPS database and store it on a TFTP server. The VMPS parser
is line based. Start each entry in the file on a new line. Ranges are not allowed for the port numbers.
Note
For an example ASCII text VMPS database configuration file, see the
Configuration File Example" section on page
Follow these guidelines for creating the VMPS database file:
•
•
•
•
•
•
•
•
To create a VMPS database, perform this task:
Task
Step 1
Determine the MAC addresses of the hosts you
want to be assigned to VLANs dynamically.
Step 2
Create an ASCII text file on your workstation or
PC that contains the MAC address-to-VLAN
mappings.
Step 3
Move the ASCII text file to a TFTP server so it
can be downloaded to the switch.
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
18-4
Begin the configuration file with the word "VMPS," to prevent other types of configuration files
from incorrectly being read by the VMPS server.
Define the VMPS domain—The VMPS domain should correspond to the VTP domain name
configured on the switch.
Define the security mode—VMPS can operate in open or secure mode.
(Optional) Define a fallback VLAN—The fallback VLAN is assigned if the MAC addresses of the
connected host is not defined in the database.
Define the MAC address-to-VLAN name mappings—Enter the MAC address of each host and the
VLAN to which each should belong. Use the --NONE-- keyword as the VLAN name to deny the
specified host network connectivity. A port is identified by the IP address of the switch and the
module/port number of the port in the form mod/port.
Define port groups—A port group is a logical group of ports. You can apply VMPS policies to
individual ports or to port groups. The keyword all-ports specifies all the ports in the specified
switch.
Define VLAN groups—A VLAN group defines a logical group of VLANs. These logical groups
define the VLAN port policies.
Define VLAN port policies—VLAN port policies define the ports associated with a restricted
VLAN. You can configure a restricted VLAN by defining the set of dynamic ports on which it can
exist.
Chapter 18
Configuring Dynamic Port VLAN Membership with VMPS
"VMPS Database
18-9.
Command
show cam
—
—
78-13315-02