Example – Westermo RedFox Series User Manual
Page 236

Westermo OS Management Guide
Version 4.17.0-0
Example
falcon:/#> configure
falcon:/config/#> no vlan 1006
falcon:/config/#> end
Port dsl 1
did not belong to any VLAN, setting as untagged in VLAN 1.
vlans: Problem activating settings.
There was some problem activating your configuration changes!
This could result in a non-functional system, continue anyway (y/N)? y
OK, accepting configuration anyway -- please review the running configuration.
Stopping DHCP Clients ...................................... [ OK ]
Configuration activated.
Remember "copy run start" to save to flash (NVRAM).
falcon:/#> show vlan
Press Ctrl-C or Q(uit) to quit viewer, Space for next page,
VID
Name
Oper Untagged/Tagged
---- ---------------- ---- ---------------------------------------------------
1 vlan1
UP
U:ALL
T:
------------------------------------------------------------------------------
falcon:/#> cp running-config startup-config
falcon:/#>
There are additional setting you may consider changing when running the Falcon
as a switch:
❼ Limit remote management: When the xDSL port is mapped to VLAN 1, the
Falcon will be open for remote management via the xDSL port just as it is
via the Ethernet ports on VLAN 1.
This is usually no problem, as the Falcon by default is assigned the default IP
address (192.168.2.200) on interface vlan1, and that address is not routable
via the ISP. However, if limiting remote management is still a concern, you
could, e.g., remove the IP address of interface vlan1. The Falcon can then
be managed only via the console port (CLI) instead.
Example
falcon:/#> configure
falcon:/config/#> iface vlan1
falcon:/config/iface-vlan1/#> inet static
falcon:/config/iface-vlan1/#> show address
192.168.2.200/24
falcon:/config/iface-vlan1/#> no address
falcon:/config/iface-vlan1/#> leave
Configuration activated.
Remember "copy run start" to save to flash (NVRAM).
falcon:/#>
❼ As switch there is no firewall: Acting as a switch, the Falcon no longer serves
as a firewall towards the Internet. You should therefore ensure that you
236
➞ 2015 Westermo Teleindustri AB