Huawei Quidway S7700 Configuration Manual - Ethernet page 94

Quidway S7700 Smart Routing Switch
Configuration Guide - Ethernet
VLAN
Assignment
Method
Protocol-
based VLAN
assignment
Policies-based
VLAN
assignment
Pre-configuration Tasks
Before dividing a LAN into VLANs, complete the following task:
l
Issue 01 (2011-07-15)
Advantage
join a VLAN, move
from one VLAN to
another VLAN, or
leave a VLAN.
MAC and IP
addresses-based or
MAC addresses, IP
addresses and
interfaces-based
VLAN assignment is
of high security. This
VLAN assignment
method does not allow
users to change MAC
addresses or IP
addresses based on
which VLANs are
configured.
Compared with other
VLAN assignment
methods, policies-
based VLAN
assignment has the
highest priority.
NOTE
In the case that the S7700 supports multiple VLAN division modes, the priorities of these VLAN division
modes are in descending order:
1. Policies-based VLAN division
This mode has the highest priority, but is not commonly used.
2. MAC address-based VLAN division and IP subnet-based VLAN division
By default, MAC address-based VLAN division is set as the preference. You can run commands to
change priorities of these two VLAN division modes.
3. Protocol-based VLAN division
4. Port-based VLAN division
Port-based VLAN division has the lowest priority, but is most commonly used.
Connecting ports and configuring physical parameters of the ports, ensuring that the ports
are physically Up
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Disadvantage
Switches need to
analyze protocol
address formats and
convert between them.
This slows down the
response of switches.
Each policy needs to
be manually
configured.
3 VLAN Configuration
Usage Scenario
Currently, VLANs can
be configured based on
AppleTalk, IPv4, IPv6,
or IPX.
Policies-based VLAN
assignment is applicable
to small-scale networks
that have strict security
requirements and a large
number of traveling
users.
77