Configuring a super VLAN
When you configure a super VLAN, follow these restrictions and guidelines:
•
Do not configure the VLAN of a MAC address-to-VLAN entry as a super VLAN.
•
Do not configure a VLAN as both a super VLAN and a guest VLAN, Auth-Fail VLAN, or critical
VLAN. For more information about guest VLANs, Auth-Fail VLANs, and critical VLANs, see
Security Configuration Guide.
•
Do not configure a VLAN as both a super VLAN and a sub-VLAN.
•
Layer 2 multicast configuration for super VLANs does not take effect because they do not have
physical ports.
To configure a super VLAN:
Step
1.
Enter system view.
2.
Enter VLAN view.
3.
Configure the VLAN
as a super VLAN.
4.
Associate the super
VLAN with the
sub-VLANs.
Configuring a super VLAN interface
As a best practice, do not configure VRRP for a super VLAN interface because the configuration
affects network performance. For more information about VRRP, see High Availability Configuration
Guide.
To configure a VLAN interface for a super VLAN:
Step
1.
Enter system view.
2.
Create a VLAN
interface and enter its
view.
3.
Configure an IP
address for the super
VLAN interface.
4.
Configure Layer 3
communication
between sub-VLANs.
Command
system-view
vlan vlan-id
supervlan
subvlan vlan-id-list
Command
system-view
interface vlan-interface
interface-number
•
Configure an IPv4 address:
ip address ip-address
{ mask-length | mask } [ sub ]
•
Configure an IPv6 address:
ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
•
Enable local proxy ARP for
devices that run IPv4 protocols:
local-proxy-arp enable
•
Enable local proxy ND for
devices that run IPv6 protocols:
local-proxy-nd enable
26
Remarks
N/A
N/A
By default, a VLAN is not a super VLAN.
By default, a super VLAN is not associated with
any sub-VLANs.
Make sure the sub-VLANs already exist before
associating them with a super VLAN.
Remarks
N/A
The value for the interface-number
argument must be the super VLAN ID.
By default, no IP address is
configured for a VLAN interface.
By default:
•
Sub-VLANs cannot
communicate with each other at
Layer 3.
•
Local proxy ARP or ND is
disabled.
For more information about local