H3C S5100-SI Operation Manual page 438

[SwitchA] interface GigabitEthernet 1/0/12
[SwitchA-GigabitEthernet1/0/12] port link-type trunk
[SwitchA-GigabitEthernet1/0/12] port trunk pvid vlan 200
[SwitchA-GigabitEthernet1/0/12] port trunk permit vlan 200 600
[SwitchA-GigabitEthernet1/0/12] quit
# Configure GigabitEthernet 1/0/10 of Switch A as a trunk port, and assign it to VLAN 100,
VLAN 200, VLAN 500, and VLAN 600.
[SwitchA] interface GigabitEthernet 1/0/10
[SwitchA-GigabitEthernet1/0/10] port link-type trunk
[SwitchA-GigabitEthernet1/0/10] port trunk permit vlan 100 200 500 600
[SwitchA-GigabitEthernet1/0/10] quit
# Configure Layer 2 ACLs on Switch A. Configure ACL 4000 to permit packets from VLAN
100, ACL 4001 to permit packets from VLAN 200, ACL 4002 to permit packets from VLAN
500, and ACL 4003 to permit packets from VLAN 600.
[SwitchA] acl number 4000
[SwitchA-acl-ethernetframe-4000] rule permit source 100
[SwitchA] quit
[SwitchA] acl number 4001
[SwitchA-acl-ethernetframe-4001] rule permit source 200
[SwitchA] quit
[SwitchA] acl number 4002
[SwitchA-acl-ethernetframe-4002] rule permit source 500
[SwitchA] quit
[SwitchA] acl number 4003
[SwitchA-acl-ethernetframe-4003] rule permit source 600
[SwitchA] quit
# Configure VLAN mapping on GigabitEthernet 1/0/11 to replace VLAN tag 100 with VLAN
tag 500.
[SwitchA] interface GigabitEthernet 1/0/11
[SwitchA-GigabitEthernet1/0/11] traffic-remark-vlanid inbound link-group 4000
remark-vlan 500
[SwitchA-GigabitEthernet1/0/11] quit
# Configure VLAN mapping on GigabitEthernet 1/0/12 to replace VLAN tag 200 with VLAN
tag 600.
[SwitchA] interface GigabitEthernet 1/0/12
[SwitchA-GigabitEthernet1/0/12] traffic-remark-vlanid inbound link-group 4001
remark-vlan 600
[SwitchA-GigabitEthernet1/0/12] quit
# Configure VLAN mapping on GigabitEthernet 1/0/10 to replace VLAN tag 500 with VLAN
tag 100 and replace VLAN tag 600 with VLAN tag 200.
[SwitchA] interface GigabitEthernet 1/0/10
1-49