H3C Technologies H3C SecPath F1000-E - Manual (Page 18)

6
The ping operation from Host A to Host B is unsuccessful because they are isolated at Layer 2 and Layer
3.
# Configure local proxy ARP to allow communication between Host A and Host B at Layer 3.
[Device-GigabitEthernet0/2] local-proxy-arp enable
The ping operation from Host A to Host B is successful after the configuration.
Local Proxy ARP Configuration Example in Isolate-User-VLAN
Network requirements
As shown in Figure 8 , the switch is attached to the device. VLAN 5 on the switch is an isolate-user-VLAN,
which includes uplink port GigabitEthernet 1/2 and two secondary VLANs, VLAN 2 and VLAN 3.
GigabitEthernet 1/3 belongs to VLAN 2, and GigabitEthernet 1/1 belongs to VLAN 3.
Configure local proxy ARP on the device to implement Layer 3 communication between VLAN 2 and
VLAN 3.
Figure 8 Network diagram for local proxy ARP configuration in isolate-user-VLAN
Configuration procedure
Step1 Configure Switch
# Create VLAN 2, VLAN 3, and VLAN 5 on Switch. Add GigabitEthernet 1/3 to VLAN 2,
GigabitEthernet 1/1 to VLAN 3, and GigabitEthernet 1/2 to VLAN 5. Configure VLAN 5 as the
isolate-user-VLAN, and VLAN 2 and VLAN 3 as secondary VLANs. Configure the mappings between
isolate-user-VLAN and the secondary VLANs.
<Switch> system-view
[Switch] vlan 2
[Switch-vlan2] port gigabitethernet 1/3
[Switch-vlan2] quit
[Switch] vlan 3
[Switch-vlan3] port gigabitethernet 1/1
[Switch-vlan3] quit
[Switch] vlan 5
[Switch-vlan5] port gigabitethernet 1/2
[Switch-vlan5] isolate-user-vlan enable