CHAPTER
11-1
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
11
Configuring Dynamic VLAN Membership
This chapter describes how to configure dynamic port VLAN membership by using the VLAN
Membership Policy Server (VMPS).
This chapter includes the following major sections:
• Understanding VMPS, page 11-1
• Understanding VMPS clients, page 11-4
Note For complete syntax and usage information for the switch commands used in this chapter, refer to the
Catalyst 4500 Series Switch Cisco IOS Command Reference and related publications at
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/index.htm.
Understanding VMPS
The following subsections describe what a VMPS server does and how it operates.
The following topics are included:
• VMPS Server Overview, page 11-1
• Security Modes for VMPS Server, page 11-2
• Fall-back VLAN, page 11-3
• Illegal VMPS client requests, page 11-3
VMPS Server Overview
A VLAN Membership Policy Server (VMPS) provides a centralized server for selecting the VLAN for
a port dynamically based on the MAC address of the device connected to the port. When the host moves
from a port on one switch in the network to a port on another switch in the network, that switch
dynamically assigns the new port to the proper VLAN for that host.
A Catalyst 4500 series switch running Cisco IOS software does not support the functionality of a VMPS.
It can only function as a VLAN Query Protocol (VQP) client, which communicates with a VMPS
through the VQP. For VMPS functionality, you need to use a Catalyst 4500 series switch (or Catalyst
6500 series switch) running Catalyst operating system (OS) software.