Configuration Restrictions And Guidelines; Configuration Procedure - HP 5120 EI Series Lan Switching Configuration Manual

Configure the downlink ports, for example, the ports connecting Device B to hosts in
to operate in host mode, so that the downlink ports can be added to the isolate-user-VLAN
associated with the secondary VLAN automatically.
For more information about the promiscuous and host mode commands, see Layer 2—LAN
Switching Command Reference.

Configuration restrictions and guidelines

To enable users in the isolate-user-VLAN to communicate with other networks at Layer 3, follow
•
these steps:
Configure VLAN interfaces for the isolate-user-VLAN and the secondary VLANs, and configure
a.
the gateway IP address for the isolate-user-VLAN interface (you do not need to configure IP
addresses for the secondary VLAN interfaces).
You must configure the isolated-vlan enable command for at least one secondary VLAN to
b.
isolate the ports in the secondary VLAN.
The dynamic MAC addresses entries learned in the isolate-user-VLAN are automatically
•
synchronized to all the secondary VLANs, and the dynamic MAC address entries learned in a
secondary VLAN are automatically synchronized to the isolate-user-VLAN. Static MAC address
entries cannot be automatically synchronized. If you have configured static MAC address entries in
the isolate-user-VLAN, you should also configure the same static MAC address entries in the
secondary VLANs to avoid broadcasts, and vice versa.

Configuration procedure

To configure an isolate-user-VLAN:
Step
1. Enter system view.
Create a VLAN and enter
2.
VLAN view.
3. Configure the VLAN as an
isolate-user-VLAN.
4. Return to system view.
5. Create secondary VLANs.
6. Configure Layer 2 isolation
between ports in the same
secondary VLAN.
7. Return to system view.
Command
system-view
vlan vlan-id
isolate-user-vlan enable
quit
vlan { vlan-id1 [ to vlan-id2 ] | all }
isolated-vlan enable
quit
141
Remarks
N/A
N/A
Not configured by default.
N/A
N/A
Optional.
By default, ports in the same
secondary VLAN can
communicate with one another at
Layer 2.
This configuration takes effect only
after you configure all ports in the
same secondary VLAN to operate
in host mode and associate the
secondary VLANs with an
isolate-user-VLAN.
N/A
Figure 45,