Skip to main content

VLANs and LAN-IP addressing

  1. If you have created templates you can select one.
  2. Define a name for the VLAN. Select the VPN in which the VLAN is to be integrated.
    • You can also not assign a VPN.
    • The VLAN ID is assigned automatically and can be adjusted later.
  3. Configure the LAN IP settings.
  4. Disable the toggle "Redistribute into WAN" if you want to prevent advertisment of the connected route in the WAN.
  5. For EC-XL, select wether the VLAN is configured campus wide or only on one CPE, as described below.
  6. To configure specific VLAN related feature, please refer to the following site: Feature configuration
  7. Confirm your entries by clicking the check mark at the bottom of the VLAN settings page.

Configure IPv6 on a VLAN​

IPv6 can be configured on a VLAN if IPv6 is enabled on the assigned Access VPN. A VLAN can then be configured either as IPv4-only or as IPv4 and IPv6 dual stack.

Prerequisites​

Behaviour and limitations​

  • A VLAN can be IPv4-only or IPv4 and IPv6 dual stack.
  • IPv6-only VLANs are not supported.
  • The IPv4 configuration remains unchanged when IPv6 is enabled.
  • The IPv6 tab is only available if the selected VPN has IPv6 enabled.
  • The IPv6 prefix should appear in the VLAN configuration only if the connected VPN has IPv6 enabled.
  • IPv6 prefixes are exchanged only within the same VPN and only between EC-M/L/XL sites.
  • EC-S sites do not support IPv6 within the Access VPN context.

Enable IPv6 on the VLAN​

  1. Assign the VLAN to an Access VPN on which IPv6 is enabled.
  2. Activate the IPv6 toggle.
  3. Enter the required IPv6 prefix for the VLAN.
  4. Configure the CPE IPv6 address(es).
  5. Confirm and save your input.

Configure DHCPv6​

DHCPv6 can be configured for dual-stack VLANs. For more information, see DHCPv6 for dual-stack VLANs

Configure SLAAC​

SLAAC can be enabled or disabled in the IPv6 settings of a VLAN.

  1. Open the IPv6 configuration of the VLAN.
  2. Under SLAAC, select Enabled or Disabled.
  3. Save your entries and submit the configuration order.

When SLAAC is enabled, IPv6 clients can automatically generate their own IPv6 address based on Router Advertisements from the CPE.

note

The combination of SLAAC and DHCPv6 is not supported.

Configure secondary IP addresses and subnets​

To set up up to five secondary IP addresses or subnets within an existing VLAN on EC-M, L, and XL devices, follow these steps:

  1. Enable Secondary IP: Open the VLAN configuration view and activate the secondary IP toggle.
  2. Add Secondary IP Subnet: Click on the Secondary IP tab. Then, click the + button to add a new secondary IP subnet.
  3. Enter IP Range and Router IP: Move to the CPE tab to input the required IP range and router IP address.
  4. Configure VRRP (Optional): If needed, access the VRRP tab to configure the VRRP settings.
  5. Save Configuration: Review all entries made, then save the configuration to apply changes.

This method is especially useful for migrating IP addressing schemas or scaling network capabilities. For further options related to secondary IP addresses on other network features, refer to the specific feature's documentation.

Configure VLANs in EC-XL​

  • Unlike Enterprise Connect S, M and L locations, EC-XL allows you to configure whether a VLAN should be configured on both routers (campus-wide) or only on one router.
  • VLANs configured on only one router can have the same VLAN tags as VLANs configured on only the other router.
note

Make sure that two VLANs with the same VLAN tag are not connected to the same L2 switch, as it cannot handle them.