Huawei Quidway S3500 Series Operation Manual page 74

Operation Manual - VLAN
Quidway S3500 Series Ethernet Switches
Chapter 2 Isolate-User-Vlan Configuration
2.1 Isolate-user-vlan Overview
Isolate-user-vlan is a new feature of the Ethernet Switches launched by Huawei
Technologies Co., Ltd., through which can save the VLAN source. isolate-user-vlan
adopts the Layer-2 VLAN architecture. (On an Ethernet Switch configure the
isolate-user-vlan and Secondary VLAN.) An isolate-user-vlan corresponds to several
Secondary VLANs. The isolate-user-vlan includes all the ports and Uplink ports of the
corresponding Secondary VLANs. In this way, a upstream switch only needs
recognizing the isolate-user-vlan of the downstream switch and ignores those
Secondary VLANs, thereby streamlining the configuration and saving the VLAN source.
You can use isolate-user-vlan to implement the isolation of the Layer-2 packets through
assigning a Secondary VLAN for each user, which only includes the ports and the
Uplink ports connected to the user. You can put the ports connected to different users
into one Secondary VLAN to implement the Layer-2 packet intercommunication.
2.2 Configure isolate-user-vlan
Isolate-user-vlan configuration includes:
Configure isolate-user-vlan
Configure secondary VLAN
Configure to map isolate-user-vlan to secondary VLAN
The tasks above are required to be configured once you enable the isolate-user-vlan.
2.2.1 Configure isolate-user-vlan
You can use the following commands to create an isolate-user-vlan for an Ethernet
switch and add new ports to it.
Create a VLAN in system view, configure it as an isolate-user-vlan and add new ports to
it in VLAN view.
Huawei Technologies Proprietary
2-1
Chapter 2 Isolate-User-Vlan Configuration