Configuring A Sep Segment - Huawei AR530 series Configuration Manual

Huawei AR530&AR550 Series Industrial Switch Routers
Configuration Guide - Ethernet Switching

8.5.1.1 Configuring a SEP Segment

Context
A SEP segment is the basic unit for SEP. A SEP segment consists of interconnected Layer 2
switching devices configured with the same SEP segment ID and control VLAN ID.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
sep segment segment-id
A SEP segment is created and the view of the SEP segment is displayed.
Step 3 (Optional) Run:
description text
A description is configured for the SEP segment.
By default, no description is configured for an SEP segment.
----End
8.5.1.2 Configuring a Control VLAN
Context
In a SEP segment, a control VLAN is used to transmit SEP packets but not service packets,
enhancing SEP security. Each SEP segment must be configured with a control VLAN. After
being added to a SEP segment configured with a control VLAN, an interface is added to the
control VLAN automatically.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
sep segment segment-id
A SEP segment is created and the view of the SEP segment is displayed.
Step 3 Run:
control-vlan vlan-id
Issue 01 (2014-11-30)
NOTE
On a SEP network that has no-neighbor edge interfaces, a device that is not in a SEP segment cannot be
added to the control VLAN of the SEP segment. Otherwise, a loop will occur on the network.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 SEP Configuration
301