HP A5120 EI Series Configuration Manual page 23

Figure 9 Network diagram for configuring local proxy ARP configuration in isolate-user-VLAN
192.168.10.100/16
Host A
192.168.10.99/16
Configuration procedure
Configure Switch B
1.
# Create VLAN 2, VLAN 3, and VLAN 5 on Switch B. Add GigabitEthernet 1/0/3 to VLAN 2,
GigabitEthernet 1/0/1 to VLAN 3, and GigabitEthernet 1/0/2 to VLAN 5. Configure VLAN 5 as the
isolate-user-VLAN, and VLAN 2 and VLAN 3 as secondary VLANs. Configure the mappings between
isolate-user-VLAN and the secondary VLANs.
<SwitchB> system-view
[SwitchB] vlan 2
[SwitchB-vlan2] port GigabitEthernet 1/0/3
[SwitchB-vlan2] quit
[SwitchB] vlan 3
[SwitchB-vlan3] port GigabitEthernet 1/0/1
[SwitchB-vlan3] quit
[SwitchB] vlan 5
[SwitchB-vlan5] port GigabitEthernet 1/0/2
[SwitchB-vlan5] isolate-user-vlan enable
[SwitchB-vlan5] quit
[SwitchB] isolate-user-vlan 5 secondary 2 3
Configure Switch A
2.
# Create VLAN 5 and add GigabitEthernet 1/0/2 to it.
<SwtichA> system-view
[SwtichA] vlan 5
[SwtichA-vlan5] port GigabitEthernet 1/0/2
[SwitchA-vlan5] quit
[SwtichA] interface vlan-interface 5
[SwtichA-Vlan-interface5] ip address 192.168.10.100 255.255.0.0
From Host A, ping Host B. The ping operation is unsuccessful because they are isolated at Layer 2.
# Configure local proxy ARP to implement Layer 3 communication between VLAN 2 and VLAN 3.
[SwtichA-Vlan-interface5] local-proxy-arp enable
Switch A
GE1/0/2
VLAN 5
Vlan-int5
GE1/0/2
VLAN 5
GE1/0/3
VLAN 2
GE1/0/1
VLAN 3
Switch B
192.168.10.200/16
Isolate-user-vlan 5
Secondary VLAN 2 and 3
Host B
15