The control-vlan command configures the control VLAN of a SEP segment for SEP packet transmission.
The undo control-vlan command deletes the configured control VLAN.
By default, no control VLAN is configured in a SEP segment.
| Parameter | Description | Value |
|---|---|---|
| vlan-id | Specifies the ID of the control VLAN in a SEP segment. | The value is an integer that ranges from 1 to 4094. |
Usage Scenario
After a SEP segment is created, run the control-vlan command to create a control VLAN for the SEP segment.
Compared with a data VLAN, a control VLAN forwards only SEP packets but not service packets in a SEP segment, which improves SEP security.
Precautions
Devices in the same SEP segment must be configured with the same control VLAN to fast forward SEP packets. Different SEP segments can use the same control VLAN.
In the absence of neighbors, devices that are not in a SEP segment cannot be added to the control VLAN of the SEP segment. Otherwise, network loops occur.
The control VLAN must be not created, and is not used by other features. In addition, no interface is added to the control VLAN.
To check whether the control VLAN is created or view the control VLAN where SEP packets are transmitted, run the display sep interface command and specify the verbose parameter.
If the SEP segment contains an interface, the control VLAN cannot be deleted. To delete the configured control VLAN, run the undo sep segment command in the interface view to remove the interface from the SEP segment, and then run the undo control-vlan command.
If the SEP segment contains no interface, you can configure the control VLAN multiple times. Only the latest configuration takes effect.
After the control VLAN is created, the configuration file automatically displays the command for creating the VLAN.
Each SEP segment must have a control VLAN. After an interface is added to a SEP segment that has a control VLAN, the interface is automatically added to the control VLAN.