Configuring the Control VLAN

Context

In an ERPS ring, the control VLAN is used only to forward RAPS PDUs but not service packets, so the security of ERPS is improved. All the devices in an ERPS ring must be configured with the same control VLAN, and different ERPS rings must use different control VLANs.

Procedure

Run system-view
The system view is displayed.
Run erps ring ring-id
The ERPS ring view is displayed.
Run control-vlan vlan-id
The control VLAN of the ERPS ring is configured.
- The control VLAN specified by vlan-id must be a VLAN that has not been created or used.
- If you run the control-vlan command multiple times, only the latest configuration takes effect.
- If the ERPS ring contains ports, the control VLAN cannot be changed. To delete the configured control VLAN, run the undo erps ring command in the interface view or the undo port command in the ERPS ring view to delete ports from the ERPS ring, and run the undo control-vlan command to delete the control VLAN.
- After a control VLAN is created, the vlan batch vlan-id1 [ to vlan-id2 ] &<1-10> command used to create common VLANs is displayed in the configuration file.
- After a port is added to an ERPS ring configured with a control VLAN, the port is added to the control VLAN.
  - If the port is a trunk port, the port trunk allow-pass vlan vlan-id command is displayed in the record of the port that has been added to the ERPS ring in the configuration file.
  - If the port is a hybrid port, the port hybrid tagged vlan vlan-id command is displayed in the record of the port that has been added to the ERPS ring in the configuration file.