Displaying and maintaining isolate-user-vlan – H3C Technologies H3C SecBlade NetStream Cards User Manual
Page 111
96
2.
Configure the secondary VLANs.
3.
Assign non-trunk ports to the isolate-user-VLAN and ensure that at least one port takes the
isolate-user-VLAN as its default VLAN.
4.
Assign non-trunk ports to each secondary VLAN and ensure that at least one port in a secondary
VLAN takes the secondary VLAN as its default VLAN.
5.
Associate the isolate-user-VLAN with the specified secondary VLANs.
Follow these steps to configure an isolate-user-VLAN:
To do...
Use the command
Remarks
Enter system view
system-view
—
Create a VLAN and enter VLAN view vlan vlan-id —
Configure the VLAN as an
isolate-user-VLAN
isolate-user-vlan enable
Required
Return to system view
quit
—
Assign access or hybrid ports to the
isolate-user-VLAN and ensure that at
least one port takes the
isolate-user-VLAN as its default VLAN
For the configuration procedure, see
the chapter “VLAN configuration.”
Required
Return to system view
quit
—
Create secondary VLANs
vlan { vlan-id1 [ to vlan-id2 ] | all }
Required
Quit to system view
quit
—
Assign access or hybrid ports to each
secondary VLAN and ensure that at
least one port in a secondary VLAN
takes the secondary VLAN as its
default VLAN
For the configuration procedure, see
the chapter “VLAN configuration.”
Required
Return to system view
quit
—
Associate the isolate-user-VLAN with
the specified secondary VLANs
isolate-user-vlan isolate-user-vlan-id
secondary secondary-vlan-id [ to
secondary-vlan-id ]
Required
NOTE:
After associating an isolate-user-VLAN with the specified secondary VLANs, you cannot add/remove a
port to/from each involved VLAN or remove each involved VLAN. To do that, you must cancel the
association first.
Displaying and maintaining isolate-user-VLAN
To do...
Use the command...
Remarks
Display the mapping between an
isolate-user-VLAN and its secondary
VLAN(s)
display isolate-user-vlan
[ isolate-user-vlan-id ]
Available in any view