H3C Technologies H3C S10500 Series Switches - Manual (Page 133)

122
To do… Use the command… Remarks
Enter Ethernet
interface view interface interface-type
interface-number
Enter Layer 2
aggregate
interface view
interface
bridge-aggregation
interface-number
Enter interface
view or port
group view
Enter port
group view port-group manual
port-group-name
Required
Use any command.
• The configuration made in Ethernet
interface view applies only to the port.
• The configuration made in port group
view applies to all ports in the port group.
• The configuration made in Layer 2
aggregate interface view applies to the
aggregate interface and its aggregation
member ports. If the system fails to apply
the configuration to the aggregate
interface, it stops applying the
configuration to aggregation member
ports. If the system fails to apply the
configuration to an aggregation member
port, it skips the port and moves to the
next member port.
Configure the link type of the
ports as hybrid
port link-type hybrid
Required
By default, all ports are access ports.
Assign the hybrid ports to the
specified VLANs port hybrid vlan vlan-id-list
{ tagged | untagged }
Required
By default, a hybrid port allows only packets
of VLAN 1 to pass through untagged.
Configure the PVID of the hybrid
ports port hybrid pvid vlan
vlan-id Optional
By default, the PVID is VLAN 1.
NOTE:
•
To change the link type of a port from trunk to hybrid or vice versa, you must set the link type to access
first.
• Before you assign a hybrid port to a VLAN, create the VLAN.
• After configuring the PVID for a hybrid port, you must use the port hybrid vlan command to configure
the hybrid port to allow packets from the PVID to pass through, so that the egress port can forward
packets from the PVID.
Port-based VLAN configuration example
Network requirements
As shown in Figure 39 :
• Host A and Host C belong to Department A, and access the enterprise network through different
devices. Host B and Host D belong to Department B. They also access the enterprise network
through different devices.
• To ensure communication security and avoid broadcast storms, VLANs are configured in the
enterprise network to isolate Layer 2 traffic of different departments. VLAN 100 is assigned to
Department A, and VLAN 200 is assigned to Department B.
• Make sure that hosts within the same VLAN can communicate with each other. Host A can
communicate with Host C, and Host B can communicate with Host D.