H3C S5100-SI

2-6
z The devices within each VLAN can communicate with each other but that in different VLANs
cannot communicate with each other directly.
Network diagram
Figure 2-1 Network diagram for VLAN configuration
Configuration procedure
z Configure Switch A.
# Create VLAN 101, specify its descriptive string as “DMZ”, and add GigabitEthernet1/0/1 to VLAN 101.
<SwitchA> system-view
[SwitchA] vlan 101
[SwitchA-vlan101] description DMZ
[SwitchA-vlan101] port GigabitEthernet 1/0/1
[SwitchA-vlan101] quit
# Create VLAN 201, and add GigabitEthernet1/0/2 to VLAN 201.
[SwitchA] vlan 201
[SwitchA-vlan201] port GigabitEthernet 1/0/2
[SwitchA-vlan201] quit
z Configure Switch B.
# Create VLAN 101, specify its descriptive string as “DMZ”, and add GigabitEthernet1/0/11 to VLAN
101.
<SwitchB> system-view
[SwitchB] vlan 101
[SwitchB-vlan101] description DMZ
[SwitchB-vlan101] port GigabitEthernet 1/0/11
[SwitchB-vlan101] quit
# Create VLAN 201, and add GigabitEthernet1/0/12 to VLAN 201.
[SwitchB] vlan 201
[SwitchB-vlan201] port GigabitEthernet 1/0/12
[SwitchB-vlan201] quit
z Configure the link between Switch A and Switch B.
Because the link between Switch A and Switch B need to transmit data of both VLAN 101 and VLAN
102, you can configure the ports at the end of the link as trunk ports and permit packets of the two
VLANs to pass through.