H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 112)

97
Isolate-user-VLAN configuration example
Network requirements
As shown in Figure 33 ,
• Connect SecBlade A to downstream devices SecBlade B and SecBlade C.
• Configure VLAN 5 on SecBlade B as an isolate-user-VLAN, assign the uplink port GigabitEthernet
0/4 to VLAN 5, and associate VLAN 5 with secondary VLANs VLAN 2 and VLAN 3. Assign
GigabitEthernet 0/2 to VLAN 2 and GigabitEthernet 0/3 to VLAN 3.
• Configure VLAN 6 on SecBlade C as an isolate-user-VLAN, assign the uplink port GigabitEthernet
0/4 to VLAN 6, and associate VLAN 6 with secondary VLANs VLAN 3 and VLAN 4. Assign
GigabitEthernet 0/2 to VLAN 3 and GigabitEthernet 0/3 to VLAN 4.
• As far as SecBlade A is concerned, SecBlade B only has VLAN 5 and SecBlade C only has VLAN
6.
Figure 33 Network diagram for isolate-user-VLAN configuration
Configuration procedure
The following part provides only the configuration on SecBlade B and SecBlade C.
1. Configure SecBlade B
# Configure the isolate-user-VLAN.
system-view
[SecBladeB] vlan 5
[SecBladeB-vlan5] isolate-user-vlan enable
[SecBladeB-vlan5] port gigabitethernet 0/4
[SecBladeB-vlan5] quit