Configuration procedure – H3C Technologies H3C S7500E Series Switches User Manual
Page 26
2-5
Figure 2-4 Network diagram for local proxy ARP between isolated ports
GE2/0/2
VLAN 2
Vlan-int2
192.168.10.100/16
Switch B
GE2/0/3
GE2/0/1
GE2/0/2
Host A
192.168.10.99/16
Host B
192.168.10.200/16
VLAN 2
port-isolate group
Switch A
z
Switch B in this diagram is a distributed device.
z
Switch B has Layer 2 and Layer 3 port isolation configured in this configuration example, so you
need to configure local proxy ARP on VLAN-interface 2 of Switch A to enable communication
between Host A and Host B. If the two ports on Switch B are isolated only at Layer 2, you can
enable communication between the two hosts by configuring local proxy ARP on VLAN-interface 2
of Switch B.
Configuration procedure
1) Configure Switch B
# Add GigabitEthernet2/0/3, GigabitEthernet2/0/1 and GigabitEthernet2/0/2 to VLAN 2. Host A and
Host B are isolated and unable to exchange Layer 2 packets.
[SwitchB] vlan 2
[SwitchB-vlan2] port gigabitethernet 2/0/1
[SwitchB-vlan2] port gigabitethernet 2/0/2
[SwitchB-vlan2] port gigabitethernet 2/0/3
[SwitchB-vlan2] quit
[SwitchB] interface gigabitethernet 2/0/1
[SwitchB-gigabitethernet2/0/1] port-isolate enable
[SwitchB-gigabitethernet2/0/1] interface gigabitethernet 2/0/3
[SwitchB-gigabitethernet2/0/3] port-isolate enable
[SwitchB-gigabitethernet2/0/3] quit
2) Configure Switch A
# Create VLAN 2, and add gigabitethernet2/0/2 to VLAN 2.
[SwitchA] vlan 2
[SwitchA-vlan2] port gigabitethernet 2/0/2
[SwitchA-vlan2] interface vlan-interface 2