- 產品與解決方案
- 行業解決方案
- 服務
- 支持
- 合作夥伴
- 關於我們
10-VLAN快速配置指南
本章節下載 (325.30 KB)
VLAN快速配置指南
Copyright © 2024 bobty下载软件 版權所有，保留一切權利。
非經本公司書麵許可，任何單位和個人不得擅自摘抄、複製本文檔內容的部分或全部，並不得以任何形式傳播。
除bobty下载软件 的商標外，本手冊中出現的其它公司的商標、產品標識及商品名稱，由各自權利人擁有。
本文檔中的信息可能變動，恕不另行通知。
目 錄
本案例介紹基於端口的VLAN的配置方法。
如圖1所示，Host A和Host C屬於部門A，但是通過不同的設備接入公司網絡；Host B和Host D屬於部門B，也通過不同的設備接入公司網絡。為了通信的安全性，以及避免廣播報文泛濫，公司網絡中使用VLAN技術來隔離部門間的二層流量。其中部門A使用VLAN 100，部門B使用VLAN 200。現要求同一VLAN內的主機能夠互通，即Host A和Host C能夠互通，Host B和Host D能夠互通。
圖1 基於端口的VLAN組網圖
# 創建VLAN 100，並將GigabitEthernet1/0/1加入VLAN 100
<DeviceA> system-view
[DeviceA] vlan 100
[DeviceA-vlan100] port gigabitEthernet 1/0/1
[DeviceA-vlan100] quit
# 創建VLAN 200，並將GigabitEthernet1/0/2加入VLAN 200
[DeviceA] vlan 200
[DeviceA-vlan200] port GigabitEthernet 1/0/2
[DeviceA-vlan200] quit
# 為了使Device A上VLAN 100和VLAN 200的報文能發送給Device B，將GigabitEthernet 1/0/3的鏈路類型配置為Trunk，並允許VLAN 100和VLAN 200的報文通過。
[DeviceA] interface gigabitEthernet 1/0/3
[DeviceA-GigabitEthernet1/0/3] port link-type trunk
[DeviceA-GigabitEthernet1/0/3] port trunk permit vlan 100 200
[DeviceA-GigabitEthernet1/0/3] quit
# 保存配置
[DeviceA] save force
# 創建VLAN 100，並將GigabitEthernet1/0/1加入VLAN 100
<DeviceB> system-view
[DeviceB] vlan 100
[DeviceB-vlan100] port gigabitEthernet 1/0/1
[DeviceB-vlan100] quit
# 創建VLAN 200，並將GigabitEthernet1/0/2加入VLAN 200
[DeviceB] vlan 200
[DeviceB-vlan200] port gigabitEthernet 1/0/2
[DeviceB-vlan200] quit
# 為了使Device B上VLAN 100和VLAN 200的報文能發送給Device A，將GigabitEthernet 1/0/3的鏈路類型配置為Trunk，並允許VLAN 100和VLAN 200的報文通過。
[DeviceB] interface gigabitEthernet 1/0/3
[DeviceB-GigabitEthernet1/0/3] port link-type trunk
[DeviceB-GigabitEthernet1/0/3] port trunk permit vlan 100 200
[DeviceB-GigabitEthernet1/0/3] quit
# 保存配置
[DeviceB] save force
# 將Host A和Host C配置在一個網段，例如192.168.100.0/24；將Host B和Host D配置在一個網段，比如192.168.200.0/24。
# 顯示Device A上VLAN的配置信息。
<DeviceA> display vlan 100
VLAN ID: 100
VLAN type: Static
Route interface: Not configured
Description: VLAN 0100
Name: VLAN 0100
Tagged ports:
GigabitEthernet1/0/3(D)
Untagged ports:
GigabitEthernet1/0/1(D)
<DeviceA> display vlan 200
VLAN ID: 200
VLAN type: Static
Route interface: Not configured
Description: VLAN 0200
Name: VLAN 0200
Tagged ports:
GigabitEthernet1/0/3(D)
Untagged ports:
GigabitEthernet1/0/2(D)
# 顯示Device B上VLAN的配置信息。
<DeviceB> display vlan 100
VLAN ID: 100
VLAN type: Static
Route interface: Not configured
Description: VLAN 0100
Name: VLAN 0100
Tagged ports:
GigabitEthernet1/0/3(D)
Untagged ports:
GigabitEthernet1/0/1(D)
<DeviceB> display vlan 200
VLAN ID: 200
VLAN type: Static
Route interface: Not configured
Description: VLAN 0200
Name: VLAN 0200
Tagged ports:
GigabitEthernet1/0/3(D)
Untagged ports:
GigabitEthernet1/0/2(D)
· Device A：
#
vlan 100
#
vlan 200
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 100
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 200
#
interface GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 100 200
· #Device B ：
vlan 100
#
vlan 200
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 100
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 200
#
interface GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 100 200
· 產品配套“二層技術-以太網交換配置指導”中的“VLAN”。
· 產品配套“二層技術-以太網交換命令參考”中的“VLAN”。
本案例介紹Super VLAN的配置方法。
如圖2所示：
· VLAN 2中的用戶通過Device A的GigabitEthernet1/0/1接入網絡，VLAN 3中的用戶通過Device A的GigabitEthernet1/0/2接入網絡。VLAN 2中有30個用戶，VLAN 3中有50個用戶。
· Device A的GigabitEthernet1/0/3和Device B的GigabitEthernet1/0/1屬於VLAN 20。
· VLAN 20中的終端用戶都使用192.168.2.0/24 網段的IP地址，使用192.168.2.1作為網關地址。
現要求通過配置Super VLAN功能實現以下應用需求：
· VLAN 2和VLAN 3中的終端用戶都使用192.168.1.0/24網段的IP地址以節省IP地址資源，使用192.168.1.1作為網關地址。
· VLAN 2、VLAN 3、VLAN 20中的終端用戶二層隔離，三層互通。
由於Super VLAN中不能包含物理端口，由此若某VLAN中已經包含物理端口，則該VLAN不能被配置為Super VLAN。
# 創建Super VLAN 10。
<DeviceA> system-view
[DeviceA] vlan 10
[DeviceA-vlan10] supervlan
[DeviceA-vlan10] quit
# 創建VLAN 2並將端口GigabitEthernet1/0/1加入VLAN 2。
[DeviceA] vlan 2
[DeviceA-vlan2] port gigabitethernet 1/0/1
[DeviceA-vlan2] quit
# 創建VLAN 3並將端口GigabitEthernet1/0/2加入VLAN 3。
[DeviceA] vlan 3
[DeviceA-vlan3] port gigabitethernet 1/0/2
[DeviceA-vlan3] quit
# 將Super VLAN 10和Sub VLAN 2和Sub VLAN 3關聯。
[DeviceA] vlan 10
[DeviceA-vlan10] subvlan 2 3
[DeviceA-vlan10] quit
# 配置Super VLAN 10對應的VLAN接口的IP地址和本地代理ARP功能。
[DeviceA] interface vlan-interface 10
[DeviceA-Vlan-interface10] ip address 192.168.1.1 24
[DeviceA-Vlan-interface10] local-proxy-arp enable
[DeviceA-Vlan-interface10] quit
# 創建VLAN 20。
[DeviceA] vlan 20
[DeviceA-vlan20] quit
# 將端口GigabitEthernet1/0/3配置為Trunk端口並允許VLAN 20通過，取消允許VLAN 1通過。
[DeviceA] interface gigabitethernet 1/0/3
[DeviceA-GigabitEthernet1/0/3] port link-type trunk
[DeviceA-GigabitEthernet1/0/3] undo port trunk permit vlan 1
[DeviceA-GigabitEthernet1/0/3] port trunk permit vlan 20
[DeviceA-GigabitEthernet1/0/3] quit
# 配置VLAN 20對應的VLAN接口的IP地址。
[DeviceA] interface Vlan-interface 20
[DeviceA-Vlan-interface20] ip address 192.168.2.1 24
[DeviceA-Vlan-interface20] quit
# 保存配置
[DeviceA] save force
# 創建VLAN 20。
[DeviceB] vlan 20
[DeviceB-vlan20] quit
# 將端口GigabitEthernet1/0/1配置為Trunk端口並允許VLAN 20通過，取消允許VLAN 1通過。
[DeviceB] interface gigabitethernet 1/0/1
[DeviceB-GigabitEthernet1/0/1] port link-type trunk
[DeviceB-GigabitEthernet1/0/1] undo port trunk permit vlan 1
[DeviceB-GigabitEthernet1/0/1] port trunk permit vlan 20
[DeviceB-GigabitEthernet1/0/1] quit
# 將端口GigabitEthernet1/0/2加入VLAN 20。
[DeviceB] vlan 20
[DeviceB-vlan20] port gigabitethernet 1/0/2
[DeviceB-vlan20] quit
# 保存配置
[DeviceB] save force
# 顯示Device A上Super VLAN的配置信息。
<DeviceA> display supervlan
Super VLAN ID: 10
Sub-VLAN ID: 2-3
VLAN ID: 10
VLAN type: Static
It is a super VLAN.
Route interface: Configured
IPv4 address: 192.168.1.1
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0010
Name: VLAN 0010
Tagged ports: None
Untagged ports: None
VLAN ID: 2
VLAN type: Static
It is a sub-VLAN.
Route interface: Configured
IPv4 address: 192.168.1.1
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0002
Name: VLAN 0002
Tagged ports: None
Untagged ports:
GigabitEthernet1/0/1
VLAN ID: 3
VLAN type: Static
It is a sub-VLAN.
Route interface: Configured
IPv4 address: 192.168.1.1
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0003
Name: VLAN 0003
Tagged ports: None
Untagged ports:
GigabitEthernet1/0/2
# 顯示Device A上VLAN 20的配置信息。
<DeviceA> display vlan 20
VLAN ID: 20
VLAN type: Static
Route interface: Configured
IPv4 address: 192.168.2.1
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0020
Name: VLAN 0020
Tagged ports:
GigabitEthernet1/0/3
Untagged ports: None
# 顯示Device B上VLAN 20的配置信息。
<DeviceA> display vlan 20
VLAN ID: 20
VLAN type: Static
Route interface: Not configured
Description: VLAN 0020
Name: VLAN 0020
Tagged ports:
GigabitEthernet1/0/1
Untagged ports:
GigabitEthernet1/0/2
· Device A ：
#
vlan 2
#
vlan 3
#
vlan 10
supervlan
subvlan 2 3
#
vlan 20
#
interface Vlan-interface10
ip address 192.168.1.1 255.255.255.0
local-proxy-arp enable
#
interface Vlan-interface20
ip address 192.168.2.1 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 3
#
interface GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
· #Device B ：
#
vlan 20
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 20
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 20
#
· 產品配套“二層技術-以太網交換配置指導”中的“VLAN”。
· 產品配套“二層技術-以太網交換命令參考”中的“VLAN”。
本案例介紹Voice VLAN的配置方法。
為了保障語音數據能夠優先轉發，需要將語音電話和Laptop地址區分開，將語音電話地址設置成192.168.2.0網段劃分到VLAN2，將Laptop地址設置成192.168.10.0網段劃分到VLAN10，路由器作為DHCP服務器給語音電話和Laptop下發IP地址。
圖3 Voice VLAN組網圖
# 開啟POE，為話機供電。
<Switch> system-view
[Switch] interface gigabitEthernet1/0/1
[Switch-GigabitEthernet1/0/1] poe enable
[Switch-GigabitEthernet1/0/1] quit
# 創建話機所屬VLAN2以及PC所屬VLAN10
[Switch] vlan 2
[Switch-vlan2] quit
[Switch] vlan 10
[Switch-vlan10] quit
# 設置允許通過的OUI地址為MAC地址前綴為6ca8-4900-0000，即當報文的前綴為6ca8-4900-0000時，設備會把它當成語音報文來處理
[Switch] voice-vlan mac-address 6ca8-4900-0000 mask ffff-ff00-0000 description avaya
# 將端口GigabitEthernet1/0/1設定為Hybrid端口，開啟端口Voice VLAN功能
[Switch] interface gigabitEthernet 1/0/1
[Switch-GigabitEthernet1/0/1] port link-type hybrid
[Switch-GigabitEthernet1/0/1] voice-vlan 2 enable
# 設置PC所屬vlan為vlan10
[Switch-GigabitEthernet1/0/1] port hybrid pvid vlan 10
[Switch-GigabitEthernet1/0/1] port hybrid vlan 10 untagged
[SWITCH-GigabitEthernet1/0/1] quit
#設備連接dhcp服務器的接口GigabitEthernet 1/0/2，允許VLAN2、LAN10通過
[Switch] interface gigabitEthernet 1/0/2
[Switch-GigabitEthernet1/0/2] port link-type trunk
[Switch-GigabitEthernet1/0/2] port trunk permit vlan 2 10
[Switch-GigabitEthernet1/0/2] quit
# 保存配置
[Switch] save force
# 創建VLAN2、VLAN10及其對應的VLAN接口，為該虛接口配置IP地址
<Router> system-view
[Router] vlan 2
[Router-vlan2] quit
[Router] vlan 10
[Router-vlan10] quit
[Router] interface Vlan-interface 2
[Router-Vlan-interface2] ip address 192.168.2.1 255.255.255.0
[Router-Vlan-interface2] quit
[Router] interface Vlan-interface 10
[Router-Vlan-interface10] ip address 192.168.10.1 255.255.255.0
[Router-Vlan-interface10] quit
# 設備連接交換機的接口GigabitEthernet 1/0/1，允許VLAN2、VLAN10通過
[Router] interface GigabitEthernet 1/0/1
[Router-GigabitEthernet1/0/1] port link-type trunk
[Router-GigabitEthernet1/0/1] port trunk permit vlan 2 10
[Router-GigabitEthernet1/0/1] quit
# 開啟DHCP服務。
[Router] dhcp enable
# 設置話機VLAN2的DHCP地址池
[Router] dhcp server ip-pool vlan2
[Router-dhcp-pool-vlan2] network 192.168.2.0 mask 255.255.255.0
[Router-dhcp-pool-vlan2] gateway-list 192.168.2.1
[Router-dhcp-pool-vlan2] quit
# 設置Laptop VLAN10的DHCP地址池
[Router] dhcp server ip-pool vlan10
[Router-dhcp-pool-vlan10] network 192.168.10.0 mask 255.255.255.0
[Router-dhcp-pool-vlan10] gateway-list 192.168.10.1
[Router-dhcp-pool-vlan10] dns-list 114.114.114.114
[Router-dhcp-pool-vlan10] quit
# 保存配置
[Router] save force
# 交換機上查驗證結果，查看話機是否加入到VLAN2
<Switch> display mac-address
MAC Address VLAN ID STATE Port/Nickname AGING
3897-d630-676b 10 Learned GE1/0/2 Y
3897-d630-676b 2 Learned GE1/0/2 Y
6ca8-4986-6d59 2 Learned GE1/0/1 Y
0068-eb95-3683 10 Learned GE1/0/1 Y
# 查看voice vlan 配置是否生效
<Switch> display voice-vlan mac-address
Oui Address Mask Description
0003-6b00-0000 ffff-ff00-0000 Cisco phone
00e0-7500-0000 ffff-ff00-0000 Polycom phone
6ca8-4900-0000 ffff-ff00-0000 avaya
# 默認voice vlan為auto(自動模式)
<Switch> display voice-vlan state
Current Voice VLANs: 1
Voice VLAN security mode: Security
Voice VLAN aging time: 1440 minutes
Voice VLAN enabled port and its mode:
PORT VLAN MODE COS DSCP
--------------------------------------------------------------------
GE1/0/1 2 AUTO 6 46
# DHCP服務器上查看話機和PC獲取IP地址
%Sep 1 09:19:59:333 2021 DHCP DHCPS/5/DHCPS_ALLOCATE_IP: DHCP server information: Server IP = 192.168.2.1, DHCP client IP = 192.168.2.2, DHCP client hardware address = 6ca8-4986-6d59, DHCP client lease = 86400.
<Router> display dhcp server ip-in-use all
Pool utilization: 0.59%
IP address Client-identifier/ Lease expiration Type
Hardware address
192.168.2.2 6ca8-4986-6d59 Aug 31 2021 09:19:59 Auto:COMMITTED
192.168.10.4 0068-eb95-3683 Aug 31 2021 09:19:42 Auto:COMMITTED
· Switch ：
#
voice-vlan mac-address 6ca8-4900-0000 mask ffff-ff00-0000 description avaya
#
vlan 2
#
vlan 10
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type hybrid
port hybrid vlan 10 untagged
port hybrid pvid vlan 10
voice-vlan 2 enable
poe enable
#
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 2 10
· Router ：
#
vlan 2
#
vlan 10
#
dhcp server ip-pool vlan2
gateway-list 192.168.2.1
network 192.168.2.0 255.255.255.0
#
dhcp server ip-pool vlan10
gateway-list 192.168.10.1
network 192.168.10.0 255.255.255.0
dns-list 114.114.114.114
#
interface Vlan-interface2
ip address 192.168.2.1 255.255.255.0
#
interface Vlan-interface10
ip address 192.168.10.1 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 2 10
· 產品配套“二層技術-以太網交換配置指導”中的“VLAN”。
· 產品配套“二層技術-以太網交換命令參考”中的“VLAN”。
本案例介紹Private VLAN的配置方法。
如圖4所示：
· 彙聚層設備Device A為接入設備Device B分配了VLAN 10，網關接口VLAN-interface10可以和所有用戶互通，以便用戶可以通過Device A來訪問外部網絡。Device B連接的所有用戶均處於同一網段10.0.0.0/24。
· Host A和B屬於銷售部，Host C和D屬於財務部。為保證安全，需要使不同部門之間二層隔離，同部門的用戶之間則可以互通。
現由於Device A不能為Device B分配更多VLAN，要求通過Private VLAN功能實現：
· Device A隻需識別VLAN 10。
· Device B在Primary VLAN 10下為各部門配置不同的Secondary VLAN，使部門間二層隔離。
圖4 Private VLAN典型配置舉例組網圖
· Private VLAN功能隻需要在接入設備Device B上配置。
· 係統缺省VLAN（VLAN 1）不支持Private VLAN相關配置。
# 配置VLAN 10為Primary VLAN。
<DeviceB> system-view
[DeviceB] vlan 10
[DeviceB-vlan10] private-vlan primary
[DeviceB-vlan10] quit
# 創建Secondary VLAN 201、202。
[DeviceB] vlan 201 to 202
# 建立Primary VLAN 10和Secondary VLAN 201、202的映射關係。
[DeviceB] vlan 10
[DeviceB-vlan10] private-vlan secondary 201 to 202
[DeviceB-vlan10] quit
# 配置上行端口GigabitEthernet1/0/1在VLAN 10中工作在promiscuous模式。
[DeviceB] interface gigabitethernet 1/0/1
[DeviceB-GigabitEthernet1/0/1] port private-vlan 10 promiscuous
[DeviceB-GigabitEthernet1/0/1] quit
# 將下行端口GigabitEthernet1/0/2、GigabitEthernet1/0/3添加到VLAN 201，GigabitEthernet1/0/4、GigabitEthernet1/0/5添加到VLAN 202，並配置它們工作在host模式。
[DeviceB] interface range gigabitethernet 1/0/2 to gigabitethernet 1/0/3
[DeviceB-if-range] port access vlan 201
[DeviceB-if-range] port private-vlan host
[DeviceB-if-range] quit
[DeviceB] interface range gigabitethernet 1/0/4 to gigabitethernet 1/0/5
[DeviceB-if-range] port access vlan 202
[DeviceB-if-range] port private-vlan host
[DeviceB-if-range] quit
# 保存配置
[DeviceB] save force
# 創建VLAN 10。將接口GigabitEthernet1/0/1加入VLAN 10。
<DeviceA> system-view
[DeviceA] vlan 10
[DeviceA-vlan10] quit
[DeviceA] interface gigabitethernet 1/0/1
[DeviceA-GigabitEthernet1/0/1] port access vlan 10
[DeviceA-GigabitEthernet1/0/1] quit
# 配置網關接口VLAN-interface10。
[DeviceA] interface vlan-interface 10
[DeviceA-Vlan-interface10] ip address 10.0.0.1 24
[DeviceA-Vlan-interface10] quit
# 保存配置
[DeviceA] save force
# Device A可以ping通任意用戶。查看ARP表，可以看到所有用戶均屬於VLAN 10。
[DeviceA] display arp
Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address VLAN/VSI name Interface Aging Type
10.0.0.2 0e9e-0671-0302 10 GE1/0/1 1062 D
10.0.0.3 0e9e-09f7-0402 10 GE1/0/1 1052 D
10.0.0.4 0e9e-0d94-0502 10 GE1/0/1 1164 D
10.0.0.5 0e9e-1263-0602 10 GE1/0/1 1109 D
# 顯示Device B上的Private VLAN配置情況。
<DeviceB> display private-vlan
Primary VLAN ID: 10
Secondary VLAN ID: 201-202
VLAN ID: 10
VLAN type: Static
Private VLAN type: Primary
Route interface: Not configured
Description: VLAN 0010
Name: VLAN 0010
Tagged ports:
None
Untagged ports:
GigabitEthernet1/0/1(U) GigabitEthernet1/0/2(U)
GigabitEthernet1/0/3(U) GigabitEthernet1/0/4(U)
GigabitEthernet1/0/5(U)
VLAN ID: 201
VLAN type: Static
Private VLAN type: Secondary
Route interface: Not configured
Description: VLAN 0201
Name: VLAN 0201
Tagged ports:
None
Untagged ports:
GigabitEthernet1/0/1(U) GigabitEthernet1/0/2(U)
GigabitEthernet1/0/3(U)
VLAN ID: 202
VLAN type: Static
Private VLAN type: Secondary
Route interface: Not configured
Description: VLAN 0202
Name: VLAN 0202
Tagged ports:
None
Untagged ports:
GigabitEthernet1/0/1(U) GigabitEthernet1/0/4(U)
GigabitEthernet1/0/5(U)
可以看到，工作在promiscuous模式的端口GigabitEthernet1/0/1和工作在host模式的端口GigabitEthernet1/0/2～GigabitEthernet1/0/5均以Untagged方式允許VLAN報文通過。
# Host A、B之間可以互相ping通，Host C、D之間可以互相ping通。Host A、B與Host C、D之間均不能ping通。
· Device A：
#
vlan 10
#
interface Vlan-interface10
ip address 10.0.0.1 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 10
#
· Device B ：
#
vlan 10
private-vlan primary
private-vlan secondary 201 to 202
#
vlan 201 to 202
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 10 201 to 202 untagged
port hybrid pvid vlan 10
port private-vlan 10 promiscuous
#
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 10 201 untagged
port hybrid pvid vlan 201
port private-vlan host
#
interface GigabitEthernet1/0/3
port link-mode bridge
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 10 201 untagged
port hybrid pvid vlan 201
port private-vlan host
#
interface GigabitEthernet1/0/4
port link-mode bridge
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 10 202 untagged
port hybrid pvid vlan 202
port private-vlan host
#
interface GigabitEthernet1/0/5
port link-mode bridge
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 10 202 untagged
port hybrid pvid vlan 202
port private-vlan host
#
· 產品配套“二層技術-以太網交換配置指導”中的“VLAN”。
· 產品配套“二層技術-以太網交換命令參考”中的“VLAN”。
不同款型規格的資料略有差異, 詳細信息請向具體銷售和400谘詢。H3C保留在沒有任何通知或提示的情況下對資料內容進行修改的權利!
支持
