H3C S5500-EI Isolate-user-vlan的典型配置
一、 组网需求:
Device A下接Device B、Device C。Device B上的VLAN 5为Isolate-user-vlan,包含上行端口GigabitEthernet1/0/5和两个Secondary VLAN(VLAN 2和VLAN 3),VLAN 2包含端口GigabitEthernet1/0/2,VLAN 3包含端口GigabitEthernet1/0/1。Device C上的VLAN 6为Isolate-user-vlan,包含上行端口GigabitEthernet1/0/5和两个Secondary VLAN(VLAN 3和VLAN 4),VLAN 3包含端口GigabitEthernet1/0/3,VLAN4包含端口GigabitEthernet1/0/4。
从Device A看,下接的Device B只有一个VLAN(VLAN 5),下接的设备C只有一个VLAN(VLAN 6)。
二、 组网图:
三、 配置步骤:
下面只列出Device B和Device C的配置过程。
(1) 配置Device B
# 配置Isolate-user-vlan。
<DeviceB> system-view
[DeviceB] vlan 5
[DeviceB-vlan5] isolate-user-vlan enable
[DeviceB-vlan5] port gigabitethernet 1/0/5
[DeviceB-vlan5] quit
# 配置Secondary VLAN。
[DeviceB] vlan 3
[DeviceB-vlan3] port gigabitethernet 1/0/1
[DeviceB-vlan3] quit
[DeviceB] vlan 2
[DeviceB-vlan2] port gigabitethernet 1/0/2
[DeviceB-vlan2] quit
# 配置Isolate-user-vlan和Secondary VLAN间的映射关系。
[DeviceB] isolate-user-vlan 5 secondary 2 to 3
(2) 配置Device C
# 配置Isolate-user-vlan。
<DeviceC> system-view
[DeviceC] vlan 6
[DeviceC-vlan6] isolate-user-vlan enable
[DeviceC-vlan6] port gigabitethernet 1/0/5
[DeviceC-vlan6] quit
# 配置Secondary VLAN。
[DeviceC] vlan 3
[DeviceC-vlan3] port gigabitethernet 1/0/3
[DeviceC-vlan3] quit
[DeviceC] vlan 4
[DeviceC-vlan4] port gigabitethernet 1/0/4
# 配置Isolate-user-vlan和Secondary VLAN间的映射关系。
[DeviceC-vlan4] quit
[DeviceC] isolate-user-vlan 6 secondary 3 to 4
显示与验证
# 显示Device B上的Isolate-user-vlan配置情况。
[DeviceB] display isolate-user-vlan
Isolate-user-VLAN VLAN ID : 5
Secondary VLAN ID : 2-3
VLAN ID: 5
VLAN Type: static
Isolate-user-VLAN type : isolate-user-VLAN
Route Interface: not configured
Description: VLAN 0005
Name: VLAN 0005
Tagged Ports: none
Untagged Ports:
GigabitEthernet1/0/1 GigabitEthernet1/0/2 GigabitEthernet1/0/5
VLAN ID: 2
VLAN Type: static
Isolate-user-VLAN type : secondary
Route Interface: not configured
Description: VLAN 0002
Name: VLAN 0010
Tagged Ports: none
Untagged Ports:
GigabitEthernet1/0/2 GigabitEthernet1/0/5
VLAN ID: 3
VLAN Type: static
Isolate-user-VLAN type : secondary
Route Interface: not configured
Description: VLAN 0003
Name: VLAN 0005
Tagged Ports: none
Untagged Ports:
GigabitEthernet1/0/1 GigabitEthernet1/0/5
四、 配置关键点:
无.
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作