CAUTION

Service Disruption

In the navigation tree Routing view, expand Network→OmniSwitch NE→Bridge Instance.

Right-click on the Bridge Instance Object icon and choose Properties. The Bridge Instance (Edit) form opens.

Configure the required parameters.

Perform the following to configure the OmniSwitch with a dynamically learned MAC address to restrict a port's ingress traffic, otherwise go to Step 7 .

Perform the following steps:

1. Click on the Learned Port Security tab and configure the required parameters.

   Note:

   The Status parameter does not appear until you enter a non-zero value for the Learning Time Window (minutes) parameter.

   Click Restart Timer to restart the MAC source learning timer if you need to restart dynamic MAC address learning on a port.

2. Click on the Ports tab and click Create to select ports on which you want to enable learned port security. The Select Port - Bridge form opens.

3. Choose one or more ports and click OK. If you need to apply the same LPS properties to multiple ports but do not need to configure static MAC addresses on the ports, go to Step 6 .

Optionally, configure static MAC addresses on the ports.

Note: Static MAC addresses can only be added to LPS-enabled ports individually.

A port must be LPS-enabled and belong to a VLAN before you can add static MAC addresses.

If traffic containing MAC addresses outside of the allowable MAC address range attempts to access an LPS port, the switch either restricts access to the port for that traffic or shuts the port down to all traffic. When this happens, the port is in an operationally violated state and an alarm is raised. See To release a violated OmniSwitch LPS port for information about how to release a violated LPS port.

Perform the following steps:

1. Choose a port and click Properties. The Learned Port Security (Edit) form opens. See To add MAC address range entries to an OmniSwitch LPS portfor information about how to add static MAC range entries.

2. Click Properties. The Physical Port (Edit) form opens.

3. Configure the required parameters.

4. Click Select in the VLAN Site panel. The Select VLAN Site form opens.

5. Choose a VLAN site and click OK.

6. Save the changes and close the form. The Learned Port Security (Edit) form reappears.

7. Optionally choose a port and click Convert to Static to stop the aging out of dynamic MAC addresses on LPS ports.

8. Repeat Step 5 if you need to add another static MAC address to the port.

Optionally, apply the same LPS properties to multiple ports.

Perform the following steps:

1. Choose multiple ports and click Properties. The Learned Port Security (Edit) form opens.

2. Configure the required parameters.

3. Save your changes and close the forms. The Bridge Instance (Edit) form reappears.

Click on the Spanning Tree tab to configure the STP modes to the bridge. This prevents bridge loops and the broadcast radiation that results from them.

1. To apply a STP Flat Mode to the bridge; go to Step 8 .

2. To apply a STP 1x1 Mode to the bridge; go to Step 10 .

CAUTION Service Disruption

Service Disruption

Changing the Protocol parameter to MSTP resets the flat bridge priority and path.

Click on the STP Flat Mode tab and choose a 1x1 instance and click Properties. The VLAN STP Instance (Edit) form opens.

1. Configure the required parameters.

2. Click on the Port tab and choose one or more ports.

3. Click Properties. The CIST Instance Ports (Edit) form opens.

4. Configure the required parameters.

5. Save your changes.

Optionally, click on the MSTI tab to configure a multiple spanning tree instance to represent represents a group of VLANs, otherwise go to Step 11 .

Note: In order to configure MSTI, the Protocol parameter must be set to MSTP.

Perform the following steps:

1. Click Create. The MST instance form opens.

2. Configure the required parameters.

3. Click on the VLAN tab and click Create to assign a VLAN to the MSTI. The Select VLAN Sites - MST Instance form opens.

4. Choose one or more VLANs and click OK.

5. Save your changes and close the forms. The Bridge Instance (Edit) form reappears.

6. Click on the MST Region tab and configure the required parameters. Go to Step 11 .

CAUTION Service Disruption

Changing the STP 1x1 Mode configuration may affect the STP calculations for this instance of

the VLAN and trigger a topology change in the network.

Click on the STP 1x1 Mode tab and choose a 1x1 instance and click Properties. The VLAN STP Instance (Edit) form opens.

1. Configure the required parameters.

2. Click on the Port tab and choose one or more ports from the list of ports that have been assigned to VLANs and click Properties. The VLAN STP Instance Ports (Edit) form opens.

3. Configure the required parameters.

4. Save your changes and close the form. The Bridge Instance (Edit) form reappears.

Click on the TLS tab and configure the TLS Mode parameter.

Click on the QoS tab and configure the required parameters.

Note: The applied values for the Default Bridged Disposition, Default Routed Disposition, and Default IGMP Disposition parameters should be the same as the configured values.

Click on the MVRP tab and configure the required parameters.

Click on the IGMP Port Group Limit tab and perform one the following:

1. Configure active (administratively Up) ports:

   Perform the following steps:

   1. Choose one or more ports and click Properties. The IGMP Port Group Limit (Edit) or IGMP Port Group Limit - (Multiple Instances) (Edit) form opens.

      Note:

      Only ports that are active (administratively Up) appear in the list. You can view the configuration of the inactive ports using the OmniSwitch CLI.

   2. Configure the required parameters.

   3. Save your changes and close the form. The Bridge Instance (Edit) form reappears.

2. Configure inactive (administratively Down) ports.

   Perform the following steps:

   1. Click Create. The Select Port - Bridge form opens.

   2. Choose an inactive port and click Properties. The Physical Port (Edit) form opens.

   3. Configure the required parameters.

   4. Save your changes and close the form. The Bridge Instance (Edit) form reappears.

      Note:

      As required, click on the Multicast VLAN Port tab in the multicast VLAN IGMP site properties to view the Port Max Group and Port Action parameter information for a multicast VLAN port. You can also view the number of IGMP groups dynamically learned by the port.

Save your changes and close the form.

End of steps