H3C Technologies H3C S10500 Series Switches User Manual
Page 157
146
{
Configure the downlink ports, for example, the ports connecting Device B to hosts in
,
to work in host mode, so that the downlink ports can be added to the isolate-user-VLAN
associated with the secondary VLAN synchronously.
{
For more information about the promiscuous and host mode commands, see Layer 2—LAN
Switching Command Reference.
4.
Associate the isolate-user-VLAN with the specified secondary VLANs.
Follow these steps to configure an isolate-user-VLAN:
To do...
Use the command
Remarks
Enter system view
system-view
—
Create a VLAN and enter
VLAN view
vlan vlan-id —
Configure the VLAN as an
isolate-user-VLAN
isolate-user-vlan enable
Required
Not configured by default.
Return to system view
quit
—
Create secondary VLANs
vlan { vlan-id1 [ to vlan-id2 ] | all }
Required
Return to system view
quit
—
Configure the uplink port
1.
Enter Layer 2 Ethernet or aggregate
interface view:
interface interface-type interface-number
Or
interface bridge-aggregation interface-number
2.
Configure the port to operate in
promiscuous mode in a specific VLAN:
port isolate-user-vlan vlan-id promiscuous
Required
Return to system view
quit
—
Configure the downlink port
1.
Enter Layer 2 Ethernet or aggregate
interface view:
interface interface-type interface-number
Or
interface bridge-aggregation interface-number
2.
Configure the link type of the port
port link-type { access | hybrid }
3.
Assign ports to the secondary VLAN
•
Access port: port access vlan vlan-id
•
Hybrid port: port hybrid vlan vlan-id-list
{ tagged | untagged }
4.
Configure the port to operate in host mode:
port isolate-user-vlan host
Required
Return to system view
quit
—
Associate the
isolate-user-VLAN with the
specified secondary VLANs
isolate-user-vlan isolate-user-vlan-id secondary
secondary-vlan-id [ to secondary-vlan-id ]
Required
Not configured by default.