After associating an isolate-user-VLAN with the specified secondary VLANs, you cannot add/remove a
access port to/from each involved VLAN or remove each involved VLAN. To do that, you must cancel
the association first.
Displaying and Maintaining Isolate-User-VLAN
Display the mapping between an
isolate-user-VLAN and its secondary VLAN(s)
Isolate-User-VLAN Configuration Example
Network requirements
Connect Device A to downstream devices Device B and Device C;
Configure VLAN 5 on Device B as an isolate-user-VLAN, assign the uplink port GigabitEthernet
2/0/5 to VLAN 5, and associate VLAN 5 with secondary VLANs VLAN 2 and VLAN 3. Assign
GigabitEthernet 2/0/2 to VLAN 2 and GigabitEthernet 2/0/1 to VLAN 3.
Configure VLAN 6 on Device C as an isolate-user-VLAN, assign the uplink port GigabitEthernet
2/0/5 to VLAN 6, and associate VLAN 6 with secondary VLANs VLAN 3 and VLAN 4. Assign
GigabitEthernet 2/0/3 to VLAN 3 and GigabitEthernet 2/0/4 to VLAN 4.
For Device A, Device B only has VLAN 5 and Device C only has VLAN 6.
Figure 3-2 Network diagram for isolate-user-VLAN configuration
VLAN 3
Host A
Host B
VLAN 2
Configuration procedure
The following part provides only the configuration on Device B and Device C.
1)
Configure Device B
# Configure the isolate-user-VLAN.
<DeviceB> system-view
To do...
VLAN 5
GE2/0/5
Device B
Device A
Use the command...
display isolate-user-vlan
[ isolate-user-vlan-id ]
VLAN 6
VLAN 3
Host C
GE2/0/5
Device C
Host D
VLAN 4
3-3
Remarks
Available in any view
Need help?
Do you have a question about the S7906E and is the answer not in the manual?
Questions and answers