Configuring Secondary Vlans - HP A5830 Configuration Manual

Configuring secondary VLANs

You cannot configure the member port of a service loopback group as the upstream or downstream port
of an isolate-user-VLAN. For more information about the service loopback group, see ―Setting a service
loopback group configuration.‖
Step...
1. Enter system view
2. Create secondary VLANs
3. Isolate ports in the same
secondary VLAN at
Layer 2
4. Return to system view
5. Enter Ethernet interface
view
6. Configure the link type of
the port
7. Assign
ports to
the
seconda
ry VLAN
8. Configure the isolate-
user-VLAN type of the
port as downstream
9. Return to system view
10. Create a secondary
VLAN interface and enter
secondary VLAN
interface view
Command...
system-view
vlan { vlan-id1 [ to vlan-id2 ]
| all }
isolated-vlan enable
quit
interface interface-type
interface-number
port link-type { access |
hybrid }
Access port port access vlan vlan-id
port hybrid vlan vlan-id-list {
Hybrid port
tagged | untagged }
port isolate-user-vlan host
quit
interface vlan-interface vlan-
interface-id
Remarks
—
Required
Optional
By default, ports in the same secondary
VLAN can communicate at Layer 2
This configuration only takes effect after
you configure the isolate-user-VLAN type of
ports in the secondary VLANs as host and
associate the secondary VLANs with an
isolate-user-VLAN
—
—
—
Required
Use either approach
Required
By default, no isolate-user-VLAN type is
specified for the port
This configuration automatically assigns the
port to the isolate-user-VLANs associated
with the isolate-user-VLAN
—

This configuration is required when
users in the isolate-user-VLAN must
communicate with other networks at
Layer 3

This configuration is optional when
users in the isolate-user-VLAN do not
need to communicate with other
networks at Layer 3
The vlan-interface-id parameter must take
the secondary VLAN ID
130