Isolate-User-Vlan Configuration Example; Network Requirements; Configuration Procedure - H3C S3600V2 SERIES Layer 2-Lan Switching Configuration Manual

Isolate-user-VLAN configuration example

Network requirements

As shown in
Connect Device A to downstream devices Device B and Device C.
•
• Configure VLAN 5 on Device B as an isolate-user-VLAN, assign the uplink port Ethernet 1/0/5 to
VLAN 5, and associate VLAN 5 with secondary VLANs VLAN 2 and VLAN 3. Assign Ethernet
1/0/2 to VLAN 2 and Ethernet 1/0/1 to VLAN 3.
Configure VLAN 6 on Device C as an isolate-user-VLAN, assign the uplink port Ethernet 1/0/5 to
•
VLAN 6, and associate VLAN 6 with secondary VLANs VLAN 3 and VLAN 4. Assign Ethernet
1/0/3 to VLAN 3 and Ethernet 1/0/4 to VLAN 4.
As far as Device A is concerned, Device B only has VLAN 5 and Device C only has VLAN 6.
•
Figure 49 Network diagram

Configuration procedure

The following part provides only the configuration on Device B and Device C.
Configure Device B:
1.
# Configure the isolate-user-VLAN.
<DeviceB> system-view
[DeviceB] vlan 5
[DeviceB-vlan5] isolate-user-vlan enable
[DeviceB-vlan5] quit
# Create secondary VLANs.
[DeviceB] vlan 2 to 3
# Associate the isolate-user-VLAN with the secondary VLANs.
[DeviceB] isolate-user-vlan 5 secondary 2 to 3
# Configure the uplink port Ethernet 1/0/5 to operate in promiscuous mode in VLAN 5.
[DeviceB] interface ethernet 1/0/5
[DeviceB-Ethernet1/0/5] port isolate-user-vlan 5 promiscuous
[DeviceB-Ethernet1/0/5] quit
Figure 49:
152