H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 121)

106
Inter-VLAN Layer 2 forwarding configuration example
Network requirements
As shown in Figure 35 , traffic between GigabitEthernet 3/0/1 and GigabitEthernet 3/0/2 is filtered by
a SecBlade card, and inter-VLAN Layer 2 forwarding needs to be configured.
• Ten-GigabitEthernet 2/0/1 of the device connects to Ten-GigabitEthernet 0/0 of the SecBlade
card. Configure the link type of the two interfaces as trunk.
• Configure the operating mode of Ten-GigabitEthernet 2/0/1 as Layer 2. Assign the port to VLAN
102 and VLAN 103. Set the default VLAN of the port as VLAN 100.
• Configure the operating mode of GigabitEthernet 3/0/1 and GigabitEthernet 3/0/2 of the device
as access. Assign them to VLAN 102 and VLAN 103 respectively.
• Configure the operating mode of Ten-GigabitEthernet 0/0 as Layer 2. Assign the port to VLAN 102,
VLAN 103, and VLAN 1000 (the VLAN where the SecBlade card resides).
• Create two subinterfaces Ten-GigabitEthernet 0/0.102 and Ten-GigabitEthernet 0/0.103 for
Ten-GigabitEthernet 0/0. Configure their operating mode as Layer 2 and the link type as access.
Assign them to VLAN 1000.
Figure 35 Network diagram for inter-VLAN Layer 2 forwarding
Configuration procedure
1. Configure the Device
# Create VLAN 102 and VLAN 103. Assign GigabitEthernet 3/0/1 to VLAN 102 and GigabitEthernet
3/0/2 to VLAN 103.
<Device> system-view
[Device] vlan 102
[Device-vlan102] port gigabitethernet 3/0/1
[Device-vlan102] quit
[Device] vlan 103
[Device-vlan103] port gigabitethernet 3/0/2
[Device-vlan103] quit
# Configure the link type of Ten-GigabitEthernet 2/0/1 as trunk, assign the trunk port to VLAN 102 and
VLAN 103, and set VLAN 100 as the default VLAN.
[Device] interface ten-gigabitethernet 2/0/1
[Device-Ten-GigabitEthernet2/0/1] port link-type trunk
[Device-Ten-GigabitEthernet2/0/1] port trunk permit vlan 102 103
[Device-Ten-GigabitEthernet2/0/1] port trunk pvid vlan 100
IP network IP network
Device
SecBlade
NSC
GE3/0/1 GE3/0/2
XGE2/0/1
XGE0/0