• 產品與解決方案
  • 行業解決方案
  • 服務
  • 支持
  • 合作夥伴
  • 關於我們

H3C園區盒式交換機 CLI快速配置指南-6W104

  • 發布時間:2025/5/12 19:56:54
  • 瀏覽量:
  • 下載量:

10-VLAN快速配置指南

本章節下載  (325.30 KB)

10-VLAN快速配置指南

VLAN快速配置指南

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Copyright © 2024 bobty下载软件 版權所有,保留一切權利。

非經本公司書麵許可,任何單位和個人不得擅自摘抄、複製本文檔內容的部分或全部,並不得以任何形式傳播。

除bobty下载软件 的商標外,本手冊中出現的其它公司的商標、產品標識及商品名稱,由各自權利人擁有。

本文檔中的信息可能變動,恕不另行通知。



1  基於端口的VLAN快速配置指南

1.1  簡介

本案例介紹基於端口的VLAN的配置方法。

1.2  組網需求

圖1所示,Host A和Host C屬於部門A,但是通過不同的設備接入公司網絡;Host B和Host D屬於部門B,也通過不同的設備接入公司網絡。為了通信的安全性,以及避免廣播報文泛濫,公司網絡中使用VLAN技術來隔離部門間的二層流量。其中部門A使用VLAN 100,部門B使用VLAN 200。現要求同一VLAN內的主機能夠互通,即Host A和Host C能夠互通,Host B和Host D能夠互通。

圖1 基於端口的VLAN組網圖

 

1.3  配置步驟

1. Device A的配置

# 創建VLAN 100,並將GigabitEthernet1/0/1加入VLAN 100

<DeviceA> system-view

[DeviceA] vlan 100

[DeviceA-vlan100] port gigabitEthernet 1/0/1

[DeviceA-vlan100] quit

# 創建VLAN 200,並將GigabitEthernet1/0/2加入VLAN 200

[DeviceA] vlan 200

[DeviceA-vlan200] port GigabitEthernet 1/0/2

[DeviceA-vlan200] quit

# 為了使Device A上VLAN 100和VLAN 200的報文能發送給Device B,將GigabitEthernet 1/0/3的鏈路類型配置為Trunk,並允許VLAN 100和VLAN 200的報文通過。

[DeviceA] interface gigabitEthernet 1/0/3

[DeviceA-GigabitEthernet1/0/3] port link-type trunk

[DeviceA-GigabitEthernet1/0/3] port trunk permit vlan 100 200

[DeviceA-GigabitEthernet1/0/3] quit

# 保存配置

[DeviceA] save force

2. Device B的配置

# 創建VLAN 100,並將GigabitEthernet1/0/1加入VLAN 100

<DeviceB> system-view

[DeviceB] vlan 100

[DeviceB-vlan100] port gigabitEthernet 1/0/1

[DeviceB-vlan100] quit

# 創建VLAN 200,並將GigabitEthernet1/0/2加入VLAN 200

[DeviceB] vlan 200

[DeviceB-vlan200] port gigabitEthernet 1/0/2

[DeviceB-vlan200] quit

# 為了使Device B上VLAN 100和VLAN 200的報文能發送給Device A,將GigabitEthernet 1/0/3的鏈路類型配置為Trunk,並允許VLAN 100和VLAN 200的報文通過。

[DeviceB] interface gigabitEthernet 1/0/3

[DeviceB-GigabitEthernet1/0/3] port link-type trunk

[DeviceB-GigabitEthernet1/0/3] port trunk permit vlan 100 200

[DeviceB-GigabitEthernet1/0/3] quit

# 保存配置

[DeviceB] save force

# 將Host A和Host C配置在一個網段,例如192.168.100.0/24;將Host B和Host D配置在一個網段,比如192.168.200.0/24。

1.4  驗證配置

# 顯示Device A上VLAN的配置信息。

<DeviceA> display vlan 100

 VLAN ID: 100

 VLAN type: Static

 Route interface: Not configured

 Description: VLAN 0100

 Name: VLAN 0100

 Tagged ports:

    GigabitEthernet1/0/3(D)

 Untagged ports:

    GigabitEthernet1/0/1(D)

<DeviceA> display vlan 200

 VLAN ID: 200

 VLAN type: Static

 Route interface: Not configured

 Description: VLAN 0200

 Name: VLAN 0200

 Tagged ports:

    GigabitEthernet1/0/3(D)

 Untagged ports:

    GigabitEthernet1/0/2(D)

# 顯示Device B上VLAN的配置信息。

<DeviceB> display vlan 100

 VLAN ID: 100

 VLAN type: Static

 Route interface: Not configured

 Description: VLAN 0100

 Name: VLAN 0100

 Tagged ports:

    GigabitEthernet1/0/3(D)

 Untagged ports:

GigabitEthernet1/0/1(D)

<DeviceB> display vlan 200

 VLAN ID: 200

 VLAN type: Static

 Route interface: Not configured

 Description: VLAN 0200

 Name: VLAN 0200

 Tagged ports:

    GigabitEthernet1/0/3(D)

 Untagged ports:

    GigabitEthernet1/0/2(D)

1.5  配置文件

·     Device A:

#

vlan 100

#

vlan 200

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port access vlan 100

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port access vlan 200

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 100 200

·     #Device B :

vlan 100

#

vlan 200

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port access vlan 100

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port access vlan 200

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 100 200

1.6  相關資料

·     產品配套“二層技術-以太網交換配置指導”中的“VLAN”。

·     產品配套“二層技術-以太網交換命令參考”中的“VLAN”。


 

2  Super VLAN快速配置指南

2.1  簡介

本案例介紹Super VLAN的配置方法。

2.2  組網需求

圖2所示:

·     VLAN 2中的用戶通過Device A的GigabitEthernet1/0/1接入網絡,VLAN 3中的用戶通過Device A的GigabitEthernet1/0/2接入網絡。VLAN 2中有30個用戶,VLAN 3中有50個用戶。

·     Device A的GigabitEthernet1/0/3和Device B的GigabitEthernet1/0/1屬於VLAN 20。

·     VLAN 20中的終端用戶都使用192.168.2.0/24 網段的IP地址,使用192.168.2.1作為網關地址。

現要求通過配置Super VLAN功能實現以下應用需求:

·     VLAN 2和VLAN 3中的終端用戶都使用192.168.1.0/24網段的IP地址以節省IP地址資源,使用192.168.1.1作為網關地址。

·     VLAN 2、VLAN 3、VLAN 20中的終端用戶二層隔離,三層互通。

圖2 Super VLAN組網圖

 

2.3  配置注意事項

由於Super VLAN中不能包含物理端口,由此若某VLAN中已經包含物理端口,則該VLAN不能被配置為Super VLAN。

2.4  配置步驟

1. Device A的配置

# 創建Super VLAN 10。

<DeviceA> system-view

[DeviceA] vlan 10

[DeviceA-vlan10] supervlan

[DeviceA-vlan10] quit

# 創建VLAN 2並將端口GigabitEthernet1/0/1加入VLAN 2。

[DeviceA] vlan 2

[DeviceA-vlan2] port gigabitethernet 1/0/1

[DeviceA-vlan2] quit

# 創建VLAN 3並將端口GigabitEthernet1/0/2加入VLAN 3。

[DeviceA] vlan 3

[DeviceA-vlan3] port gigabitethernet 1/0/2

[DeviceA-vlan3] quit

# 將Super VLAN 10和Sub VLAN 2和Sub VLAN 3關聯。

[DeviceA] vlan 10

[DeviceA-vlan10] subvlan 2 3

[DeviceA-vlan10] quit

# 配置Super VLAN 10對應的VLAN接口的IP地址和本地代理ARP功能。

[DeviceA] interface vlan-interface 10

[DeviceA-Vlan-interface10] ip address 192.168.1.1 24

[DeviceA-Vlan-interface10] local-proxy-arp enable

[DeviceA-Vlan-interface10] quit

# 創建VLAN 20。

[DeviceA] vlan 20

[DeviceA-vlan20] quit

# 將端口GigabitEthernet1/0/3配置為Trunk端口並允許VLAN 20通過,取消允許VLAN 1通過。

[DeviceA] interface gigabitethernet 1/0/3

[DeviceA-GigabitEthernet1/0/3] port link-type trunk

[DeviceA-GigabitEthernet1/0/3] undo port trunk permit vlan 1

[DeviceA-GigabitEthernet1/0/3] port trunk permit vlan 20

[DeviceA-GigabitEthernet1/0/3] quit

# 配置VLAN 20對應的VLAN接口的IP地址。

[DeviceA] interface Vlan-interface 20

[DeviceA-Vlan-interface20] ip address 192.168.2.1 24

[DeviceA-Vlan-interface20] quit

# 保存配置

[DeviceA] save force

2. Device B的配置

# 創建VLAN 20。

[DeviceB] vlan 20

[DeviceB-vlan20] quit

# 將端口GigabitEthernet1/0/1配置為Trunk端口並允許VLAN 20通過,取消允許VLAN 1通過。

[DeviceB] interface gigabitethernet 1/0/1

[DeviceB-GigabitEthernet1/0/1] port link-type trunk

[DeviceB-GigabitEthernet1/0/1] undo port trunk permit vlan 1

[DeviceB-GigabitEthernet1/0/1] port trunk permit vlan 20

[DeviceB-GigabitEthernet1/0/1] quit

# 將端口GigabitEthernet1/0/2加入VLAN 20。

[DeviceB] vlan 20

[DeviceB-vlan20] port gigabitethernet 1/0/2

[DeviceB-vlan20] quit

# 保存配置

[DeviceB] save force

2.5  驗證配置

# 顯示Device A上Super VLAN的配置信息。

<DeviceA> display supervlan

 Super VLAN ID: 10

 Sub-VLAN ID: 2-3

 

 VLAN ID: 10

 VLAN type: Static

 It is a super VLAN.

 Route interface: Configured

 IPv4 address: 192.168.1.1

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0010

 Name: VLAN 0010

 Tagged ports:   None

 Untagged ports: None

 

 VLAN ID: 2

 VLAN type: Static

 It is a sub-VLAN.

 Route interface: Configured

 IPv4 address: 192.168.1.1

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0002

 Name: VLAN 0002

 Tagged ports:   None

 Untagged ports:

    GigabitEthernet1/0/1

 

 VLAN ID: 3

 VLAN type: Static

 It is a sub-VLAN.

 Route interface: Configured

 IPv4 address: 192.168.1.1

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0003

 Name: VLAN 0003

 Tagged ports:   None

 Untagged ports:

GigabitEthernet1/0/2

# 顯示Device A上VLAN 20的配置信息。

<DeviceA> display vlan 20

 VLAN ID: 20

 VLAN type: Static

 Route interface: Configured

 IPv4 address: 192.168.2.1

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0020

 Name: VLAN 0020

 Tagged ports:

    GigabitEthernet1/0/3

 Untagged ports: None

# 顯示Device B上VLAN 20的配置信息。

<DeviceA> display vlan 20

 VLAN ID: 20

 VLAN type: Static

 Route interface: Not configured

 Description: VLAN 0020

 Name: VLAN 0020

 Tagged ports:

    GigabitEthernet1/0/1

 Untagged ports:

    GigabitEthernet1/0/2

2.6  配置文件

·     Device A :

#

vlan 2

#

vlan 3

#

vlan 10

 supervlan

 subvlan 2 3

#

vlan 20

#

interface Vlan-interface10

 ip address 192.168.1.1 255.255.255.0

 local-proxy-arp enable

#

interface Vlan-interface20

 ip address 192.168.2.1 255.255.255.0

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port access vlan 2

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port access vlan 3

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

·     #Device B :

#

vlan 20

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 20

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port access vlan 20

#

2.7  相關資料

·     產品配套“二層技術-以太網交換配置指導”中的“VLAN”。

·     產品配套“二層技術-以太網交換命令參考”中的“VLAN”。


 

3  Voice VLAN快速配置指南

3.1  簡介

本案例介紹Voice VLAN的配置方法。

3.2  組網需求

為了保障語音數據能夠優先轉發,需要將語音電話和Laptop地址區分開,將語音電話地址設置成192.168.2.0網段劃分到VLAN2,將Laptop地址設置成192.168.10.0網段劃分到VLAN10,路由器作為DHCP服務器給語音電話和Laptop下發IP地址。

圖3 Voice  VLAN組網圖

 

3.3  配置步驟

1. Swtich的配置

# 開啟POE,為話機供電。

<Switch> system-view

[Switch] interface gigabitEthernet1/0/1

[Switch-GigabitEthernet1/0/1] poe enable

[Switch-GigabitEthernet1/0/1] quit

# 創建話機所屬VLAN2以及PC所屬VLAN10

[Switch] vlan 2

[Switch-vlan2] quit

[Switch] vlan 10

[Switch-vlan10] quit

# 設置允許通過的OUI地址為MAC地址前綴為6ca8-4900-0000,即當報文的前綴為6ca8-4900-0000時,設備會把它當成語音報文來處理

[Switch] voice-vlan mac-address 6ca8-4900-0000 mask ffff-ff00-0000 description avaya

# 將端口GigabitEthernet1/0/1設定為Hybrid端口,開啟端口Voice VLAN功能

[Switch] interface gigabitEthernet 1/0/1

[Switch-GigabitEthernet1/0/1] port link-type hybrid

[Switch-GigabitEthernet1/0/1] voice-vlan 2 enable

# 設置PC所屬vlan為vlan10

[Switch-GigabitEthernet1/0/1] port hybrid pvid vlan 10

[Switch-GigabitEthernet1/0/1] port hybrid vlan 10 untagged

[SWITCH-GigabitEthernet1/0/1] quit

#設備連接dhcp服務器的接口GigabitEthernet 1/0/2,允許VLAN2、LAN10通過

[Switch] interface gigabitEthernet 1/0/2

[Switch-GigabitEthernet1/0/2] port link-type trunk

[Switch-GigabitEthernet1/0/2] port trunk permit vlan 2 10

[Switch-GigabitEthernet1/0/2] quit

# 保存配置

[Switch] save force

2. Router的配置

# 創建VLAN2、VLAN10及其對應的VLAN接口,為該虛接口配置IP地址

<Router> system-view

[Router] vlan 2

[Router-vlan2] quit

[Router] vlan 10

[Router-vlan10] quit

[Router] interface Vlan-interface 2

[Router-Vlan-interface2] ip address 192.168.2.1 255.255.255.0

[Router-Vlan-interface2] quit

[Router] interface Vlan-interface 10

[Router-Vlan-interface10] ip address 192.168.10.1 255.255.255.0

[Router-Vlan-interface10] quit

# 設備連接交換機的接口GigabitEthernet 1/0/1,允許VLAN2、VLAN10通過

[Router] interface GigabitEthernet 1/0/1

[Router-GigabitEthernet1/0/1] port link-type trunk

[Router-GigabitEthernet1/0/1] port trunk permit vlan 2 10

[Router-GigabitEthernet1/0/1] quit

# 開啟DHCP服務。

[Router] dhcp enable

# 設置話機VLAN2的DHCP地址池

[Router] dhcp server ip-pool vlan2

[Router-dhcp-pool-vlan2] network 192.168.2.0 mask 255.255.255.0

[Router-dhcp-pool-vlan2] gateway-list 192.168.2.1

[Router-dhcp-pool-vlan2] quit

# 設置Laptop VLAN10的DHCP地址池

[Router] dhcp server ip-pool vlan10

[Router-dhcp-pool-vlan10] network 192.168.10.0 mask 255.255.255.0

[Router-dhcp-pool-vlan10] gateway-list 192.168.10.1

[Router-dhcp-pool-vlan10] dns-list 114.114.114.114

[Router-dhcp-pool-vlan10] quit

# 保存配置

[Router] save force

3.4  驗證配置

# 交換機上查驗證結果,查看話機是否加入到VLAN2

<Switch> display mac-address

MAC Address VLAN ID STATE Port/Nickname AGING

3897-d630-676b 10 Learned GE1/0/2 Y

3897-d630-676b 2 Learned GE1/0/2 Y

6ca8-4986-6d59 2 Learned GE1/0/1 Y

0068-eb95-3683 10 Learned GE1/0/1 Y

# 查看voice vlan 配置是否生效

<Switch> display voice-vlan mac-address

Oui Address Mask Description

0003-6b00-0000 ffff-ff00-0000 Cisco phone

00e0-7500-0000 ffff-ff00-0000 Polycom phone

6ca8-4900-0000 ffff-ff00-0000 avaya

# 默認voice vlanauto(自動模式)

<Switch> display voice-vlan state

Current Voice VLANs: 1

Voice VLAN security mode: Security

Voice VLAN aging time: 1440 minutes

Voice VLAN enabled port and its mode:

PORT VLAN MODE COS DSCP

--------------------------------------------------------------------

GE1/0/1 2 AUTO 6 46

# DHCP服務器上查看話機和PC獲取IP地址

%Sep 1 09:19:59:333 2021 DHCP DHCPS/5/DHCPS_ALLOCATE_IP: DHCP server information: Server IP = 192.168.2.1, DHCP client IP = 192.168.2.2, DHCP client hardware address = 6ca8-4986-6d59, DHCP client lease = 86400.

<Router> display dhcp server ip-in-use all

Pool utilization: 0.59%

IP address Client-identifier/ Lease expiration Type

Hardware address

192.168.2.2 6ca8-4986-6d59 Aug 31 2021 09:19:59 Auto:COMMITTED

192.168.10.4 0068-eb95-3683 Aug 31 2021 09:19:42 Auto:COMMITTED

3.5  配置文件

·     Switch :

#

 voice-vlan mac-address 6ca8-4900-0000 mask ffff-ff00-0000 description avaya

#

vlan 2

#

vlan 10

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 port hybrid vlan 10 untagged

 port hybrid pvid vlan 10

 voice-vlan 2 enable

 poe enable

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 2 10

·     Router :

#

vlan 2

#

vlan 10

#

dhcp server ip-pool vlan2

 gateway-list 192.168.2.1

 network 192.168.2.0 255.255.255.0

#

dhcp server ip-pool vlan10

 gateway-list 192.168.10.1

 network 192.168.10.0 255.255.255.0

 dns-list 114.114.114.114

#

interface Vlan-interface2

 ip address 192.168.2.1 255.255.255.0

#

interface Vlan-interface10

 ip address 192.168.10.1 255.255.255.0

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 2 10

3.6  相關資料

·     產品配套“二層技術-以太網交換配置指導”中的“VLAN”。

·     產品配套“二層技術-以太網交換命令參考”中的“VLAN”。


 

4  Private VLAN快速配置指南

4.1  簡介

本案例介紹Private VLAN的配置方法。

4.2  組網需求

圖4所示:

·     彙聚層設備Device A為接入設備Device B分配了VLAN 10,網關接口VLAN-interface10可以和所有用戶互通,以便用戶可以通過Device A來訪問外部網絡。Device B連接的所有用戶均處於同一網段10.0.0.0/24。

·     Host A和B屬於銷售部,Host C和D屬於財務部。為保證安全,需要使不同部門之間二層隔離,同部門的用戶之間則可以互通。

現由於Device A不能為Device B分配更多VLAN,要求通過Private VLAN功能實現:

·     Device A隻需識別VLAN 10。

·     Device B在Primary VLAN 10下為各部門配置不同的Secondary VLAN,使部門間二層隔離。

圖4 Private VLAN典型配置舉例組網圖

 

4.3  配置注意事項

·     Private VLAN功能隻需要在接入設備Device B上配置。

·     係統缺省VLAN(VLAN 1)不支持Private VLAN相關配置。

4.4  配置步驟

1. Dvice B的配置

# 配置VLAN 10為Primary VLAN。

<DeviceB> system-view

[DeviceB] vlan 10

[DeviceB-vlan10] private-vlan primary

[DeviceB-vlan10] quit

# 創建Secondary VLAN 201、202。

[DeviceB] vlan 201 to 202

# 建立Primary VLAN 10和Secondary VLAN 201、202的映射關係。

[DeviceB] vlan 10

[DeviceB-vlan10] private-vlan secondary 201 to 202

[DeviceB-vlan10] quit

# 配置上行端口GigabitEthernet1/0/1在VLAN 10中工作在promiscuous模式。

[DeviceB] interface gigabitethernet 1/0/1

[DeviceB-GigabitEthernet1/0/1] port private-vlan 10 promiscuous

[DeviceB-GigabitEthernet1/0/1] quit

# 將下行端口GigabitEthernet1/0/2、GigabitEthernet1/0/3添加到VLAN 201,GigabitEthernet1/0/4、GigabitEthernet1/0/5添加到VLAN 202,並配置它們工作在host模式。

[DeviceB] interface range gigabitethernet 1/0/2 to gigabitethernet 1/0/3

[DeviceB-if-range] port access vlan 201

[DeviceB-if-range] port private-vlan host

[DeviceB-if-range] quit

[DeviceB] interface range gigabitethernet 1/0/4 to gigabitethernet 1/0/5

[DeviceB-if-range] port access vlan 202

[DeviceB-if-range] port private-vlan host

[DeviceB-if-range] quit

# 保存配置

[DeviceB] save force

2. Dvice A的配置

# 創建VLAN 10。將接口GigabitEthernet1/0/1加入VLAN 10。

<DeviceA> system-view

[DeviceA] vlan 10

[DeviceA-vlan10] quit

[DeviceA] interface gigabitethernet 1/0/1

[DeviceA-GigabitEthernet1/0/1] port access vlan 10

[DeviceA-GigabitEthernet1/0/1] quit

# 配置網關接口VLAN-interface10。

[DeviceA] interface vlan-interface 10

[DeviceA-Vlan-interface10] ip address 10.0.0.1 24

[DeviceA-Vlan-interface10] quit

# 保存配置

[DeviceA] save force

4.5  驗證配置

# Device A可以ping通任意用戶。查看ARP表,可以看到所有用戶均屬於VLAN 10。

[DeviceA] display arp

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address      MAC address    VLAN/VSI name Interface                Aging Type

10.0.0.2        0e9e-0671-0302 10            GE1/0/1                  1062  D

10.0.0.3        0e9e-09f7-0402 10            GE1/0/1                  1052  D

10.0.0.4        0e9e-0d94-0502 10            GE1/0/1                  1164  D

10.0.0.5        0e9e-1263-0602 10            GE1/0/1                  1109  D

# 顯示Device B上的Private VLAN配置情況。

<DeviceB> display private-vlan

 Primary VLAN ID: 10

 Secondary VLAN ID: 201-202

 

 VLAN ID: 10

 VLAN type: Static

 Private VLAN type: Primary

 Route interface: Not configured

 Description: VLAN 0010

 Name: VLAN 0010

 Tagged ports:

    None

 Untagged ports:

    GigabitEthernet1/0/1(U)            GigabitEthernet1/0/2(U)

    GigabitEthernet1/0/3(U)            GigabitEthernet1/0/4(U)

    GigabitEthernet1/0/5(U)

 

 VLAN ID: 201

 VLAN type: Static

 Private VLAN type: Secondary

 Route interface: Not configured

 Description: VLAN 0201

 Name: VLAN 0201

 Tagged ports:

    None

 Untagged ports:

    GigabitEthernet1/0/1(U)            GigabitEthernet1/0/2(U)

    GigabitEthernet1/0/3(U)

 

 VLAN ID: 202

 VLAN type: Static

 Private VLAN type: Secondary

 Route interface: Not configured

 Description: VLAN 0202

 Name: VLAN 0202

 Tagged ports:

    None

 Untagged ports:

    GigabitEthernet1/0/1(U)            GigabitEthernet1/0/4(U)

    GigabitEthernet1/0/5(U)

可以看到,工作在promiscuous模式的端口GigabitEthernet1/0/1和工作在host模式的端口GigabitEthernet1/0/2~GigabitEthernet1/0/5均以Untagged方式允許VLAN報文通過。

# Host A、B之間可以互相ping通,Host C、D之間可以互相ping通。Host A、B與Host C、D之間均不能ping通。

4.6  配置文件

·     Device A:

#

vlan 10

#

interface Vlan-interface10

 ip address 10.0.0.1 255.255.255.0

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port access vlan 10

#

·     Device B :

#

vlan 10

 private-vlan primary

 private-vlan secondary 201 to 202

#

vlan 201 to 202

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 201 to 202 untagged

 port hybrid pvid vlan 10

 port private-vlan 10 promiscuous

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 201 untagged

 port hybrid pvid vlan 201

 port private-vlan host

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 201 untagged

 port hybrid pvid vlan 201

 port private-vlan host

#

interface GigabitEthernet1/0/4

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 202 untagged

 port hybrid pvid vlan 202

 port private-vlan host

#

interface GigabitEthernet1/0/5

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 10 202 untagged

 port hybrid pvid vlan 202

 port private-vlan host

#

4.7  相關資料

·     產品配套“二層技術-以太網交換配置指導”中的“VLAN”。

·     產品配套“二層技術-以太網交換命令參考”中的“VLAN”。

 

不同款型規格的資料略有差異, 詳細信息請向具體銷售和400谘詢。H3C保留在沒有任何通知或提示的情況下對資料內容進行修改的權利!

BOB登陆
官網
聯係我們