Chapter 2 Isolate-User-Vlan Configuration; Introduction To Isolate-User-Vlan - H3C S7500E Series Operation Manual

Operation Manual – VLAN
H3C S7500E Series Ethernet Switches

Chapter 2 Isolate-User-VLAN Configuration

When configuring Isolate-user VLAN, go to these sections for information you are
interested in:

Introduction to Isolate-User-VLAN

Configuring Isolate-User-VLAN
Displaying and Maintaining Isolate-User-VLAN
Isolate-User-VLAN Configuration Example
2.1 Introduction to Isolate-User-VLAN
The isolate-user-VLAN adopts a two-tier VLAN structure. In this approach, two types of
VLANs, isolate-user-VLAN and secondary VLAN, are configured on the same device.
The isolate-user-VLAN is mainly used for upstream data exchange. An
isolate-user-VLAN can have multiple secondary VLANs associated to it. The
upstream device only knows the isolate-user-VLAN, how the secondary VLANs
are working is not its concern. In this way, network configurations are simplified
and VLAN resources are saved.
Secondary VLANs are used for connecting users. Secondary VLANs are isolated
from each other on Layer 2. To allow users from different secondary VLANs under
the same isolate-user-VLAN to communicate with each other, you can enable
ARP proxy on the upstream device to realize Layer 3 communication between the
secondary VLANs.
One isolate-user-VLAN can have multiple secondary VLANs, which are invisible to
the corresponding upstream device.
As illustrated in the following figure, the isolate-user-vlan function is enabled on Switch
B. VLAN 10 is the isolate-user-VLAN, and VLAN 2, VLAN 5, and VLAN 8 are secondary
VLANs that are mapped to VLAN 10 and are invisible to Switch A.
Figure 2-1 An isolate-user-vlan example
Chapter 2 Isolate-User-VLAN Configuration
2-1