H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 111)

96
2. Configure the secondary VLANs.
3. Assign non-trunk ports to the isolate-user-VLAN and ensure that at least one port takes the
isolate-user-VLAN as its default VLAN.
4. Assign non-trunk ports to each secondary VLAN and ensure that at least one port in a secondary
VLAN takes the secondary VLAN as its default VLAN.
5. Associate the isolate-user-VLAN with the specified secondary VLANs.
Follow these steps to configure an isolate-user-VLAN:
To do... Use the command Remarks
Enter system view system-view —
Create a VLAN and enter VLAN view vlan vlan-id —
Configure the VLAN as an
isolate-user-VLAN
isolate-user-vlan enable Required
Return to system view quit —
Assign access or hybrid ports to the
isolate-user-VLAN and ensure that at
least one port takes the
isolate-user-VLAN as its default VLAN
For the configuration procedure, see
the chapter “VLAN configuration.”
Required
Return to system view quit —
Create secondary VLANs vlan { vlan-id1 [ to vlan-id2 ] | all } Required
Quit to system view quit —
Assign access or hybrid ports to each
secondary VLAN and ensure that at
least one port in a secondary VLAN
takes the secondary VLAN as its
default VLAN
For the configuration procedure, see
the chapter “VLAN configuration.”
Required
Return to system view quit —
Associate the isolate-user-VLAN with
the specified secondary VLANs
isolate-user-vlan isolate-user-vlan-id
secondary secondary-vlan-id [ to
secondary-vlan-id ]
Required
NOTE:
After associating an isolate-user-VLAN with the specified secondary VLANs, you cannot add/remove a
port to/from each involved VLAN or remove each involved VLAN. To do that, you must cancel the
association first.
Displaying and maintaining isolate-user-VLAN
To do... Use the command... Remarks
Display the mapping between an
isolate-user-VLAN and its secondary
VLAN(s)
display isolate-user-vlan
[ isolate-user-vlan-id ]
Available in any view