3Com 4510G - Page 146

7-2
3) Assign non-trunk ports to the isolate-user-VLAN and ensure that at least one port takes the
isolate-user-VLAN as its default VLAN;
4) Assign non-trunk ports to each secondary VLAN and ensure that at least one port in a secondary
VLAN takes the secondary VLAN as its default VLAN;
5) Associate the isolate-user-VLAN with the specified secondary VLANs.
Follow these steps to configure an isolate-user-VLAN:
To do... Use the command Remarks
Enter system view system-view —
Create a VLAN and enter VLAN
view
vlan vlan-id —
Configure the VLAN as an
isolate-user-VLAN
isolate-user-vlan enable Required
Return to system view quit —
Access port
Refer to
Assigning an Access Port to a
VLAN
Assign ports to the
isolate-user-VLAN
and ensure that at
least one port
takes the
isolate-user-VLAN
as its default
VLAN
Hybrid port
Refer to
Assigning a Hybrid Port to a
VLAN
Use either approach.
Return to system view quit —
Create secondary VLANs vlan { vlan-id1 [ to vlan-id2 ] | all } Required
Quit to system view quit —
Access port
Refer to
Assigning an Access Port to a
VLAN
Assign ports to
each secondary
VLAN and
ensure that at
least one port in
a secondary
VLAN takes the
secondary VLAN
as its default
VLAN
Hybrid port
Refer to
Assigning a Hybrid Port to a
VLAN
Required to choose
either
Return to system view quit —
Associate the isolate-user-VLAN
with the specified secondary
VLANs
isolate-user-vlan isolate-user-vlan-id
secondary secondary-vlan-id [ to
secondary-vlan-id ]
Required
After associating an isolate-user-VLAN with the specified secondary VLANs, you cannot add/remove a
access port to/from each involved VLAN or remove each involved VLAN. To do that, you must cancel
the association first.