Configuring VLAN Membership

The Port VLAN Membership page displays all ports on the device along with a list of VLANs to which each port belongs.

If the port-based authentication method for an interface is 802.1x and the Administrative Port Control is Auto, then:

• Until the port is authenticated, it is excluded from all VLANs, except guest and unauthenticated ones. In the VLAN to Port page, the port is marked with an upper case P.
• When the port is authenticated, it receives membership in the VLAN in which it was configured.

To assign a port to one or more VLANs:

1. Click VLAN Management > Port VLAN Membership.
2. Select interface type (Port or LAG), and click Go. The following fields are displayed for all interfaces of the selected type:
Interface—Port/LAG ID.
• Mode—Interface VLAN mode that was selected in the Interface Settings page.
• Administrative VLANs—Drop-down list that displays all VLANs of which the interface might be a member.
• Operational VLANs—Drop-down list that displays all VLANs of which the interface is currently a member.
• LAG—If interface selected is Port, displays the LAG in which it is a member.
3. Select a port, and click the Join VLAN button.
4. Enter the values for the following fields:
Interface—Select a Port or LAG.
• Mode—Displays the port VLAN mode that was selected in the Interface Settings page.
• Select VLAN—To associate a port with a VLAN(s), move the VLAN ID(s) from the left list to the right list by using the arrow buttons. The default VLAN might appear in the right list if it is tagged, but it cannot be selected.
• Tagging—Select one of the following tagging/PVID options:
Forbidden—The interface is not allowed to join the VLAN. When a port is not a member of any other VLAN, enabling this option on the port makes the port part of internal VLAN 4095 (a reserved VID).
• Excluded—The interface is currently not a member of the VLAN. This is the default for all the ports and LAGs when the VLAN is newly created.
• Tagged—Select whether the port is tagged. This is not relevant for Access ports.
• Untagged—Select whether port is untagged. This is not relevant for Access ports.
• PVID—Port PVID is set to this VLAN. If the interface is in access mode or trunk mode, the device automatically makes the interface an untagged member of the VLAN. If the interface is in general mode, you must manually configure VLAN membership.
5. Click Apply. The settings are modified and written to the Running Configuration file.
6. To see the administrative and operational VLANs on an interface, click Details.