Configuration Restrictions And Guidelines; Configuration Procedure - H3C S7500E-X Configuration Manual

Configure the secondary VLANs.
2.
Associate the secondary VLANs with the primary VLAN.
3.
Configure the uplink and downlink ports:
4.
Configure the uplink port (for example, the port connecting L2 Device B to L3 Device A
in Figure
− When the port allows only one primary VLAN, configure the port as a promiscuous port
− When the port allows multiple primary VLANs, configure the port as a trunk promiscuous
Configure a downlink port (for example, the port connecting L2 Device B to a host in
44) as a host port. The host port can be automatically assigned to the secondary VLAN and
its associated primary VLAN.
If a downlink port allows multiple secondary VLANs, configure the port as a trunk secondary
port. The trunk secondary port can be automatically assigned to the secondary VLANs and
their associated primary VLANs.
For more information about promiscuous, trunk promiscuous, host, and trunk secondary ports,
see Layer 2—LAN Switching Command Reference.
Configure Layer 3 communication between the specified secondary VLANs that are associated
5.
with the primary VLAN.

Configuration restrictions and guidelines

When you configure the private VLAN feature, follow these restrictions and guidelines:
•
VLAN 1 (system default VLAN) does not support the private VLAN configuration.
•
Configure the uplink port as a trunk promiscuous port if the port link type is trunk.
•
Make sure the following requirements are met:
For a promiscuous port:
− The primary VLAN is the PVID of the port.
− The port is an untagged member of the primary VLAN and secondary VLANs.
A trunk promiscuous or trunk secondary port must be a tagged member of the primary
VLANs and the secondary VLANs.
For a host port:
− The PVID of the port is a secondary VLAN.
− The port is an untagged member of the primary VLAN and the secondary VLAN.

Configuration procedure

To configure the private VLAN feature:
Step
Enter system view.
1.
Create a VLAN and enter
2.
VLAN view.
Configure the VLAN as a
3.
primary VLAN.
44):
of the primary VLAN. The promiscuous port can be automatically assigned to the
primary VLAN and its associated secondary VLANs.
port of the primary VLANs. The trunk promiscuous port can be automatically assigned to
the primary VLANs and their associated secondary VLANs.
Command
system-view
vlan vlan-id
private-vlan primary
Remarks
N/A
N/A
By default, a VLAN is not a primary
VLAN.
143
Figure