Port-based VLAN configuration example
Network requirements
As shown in Figure 31:
• Host A and Host C belong to Department A, and access the enterprise network through different
devices. Host B and Host D belong to Department B. They also access the enterprise network
through different devices.
• To ensure communication security and avoid broadcast storms, VLANs are configured in the
enterprise network to isolate Layer 2 traffic of different departments. VLAN 100 is assigned to
Department A, and VLAN 200 is assigned to Department B.
• Ensure that hosts within the same VLAN can communicate with each other. Host A can
communicate with Host C, and Host B can communicate with Host D.
Figure 31 Network diagram for port-based VLAN configuration
Eth1/0/2
Eth1/0/1
Host A Host CHost B Host D
Device A
VLAN 100 VLAN 100VLAN 200 VLAN 200
Device B
Eth1/0/1
Eth1/0/2
Eth1/0/3 Eth1/0/3
Configuration procedure
1. Configure Device A.
# Create VLAN 100, and assign port Ethernet 1/0/1 to VLAN 100.
<DeviceA> system-view
[DeviceA] vlan 100
[DeviceA-vlan100] port ethernet 1/0/1
[DeviceA-vlan100] quit
# Create VLAN 200, and assign port Ethernet 1/0/2 to VLAN 200.
[DeviceA] vlan 200
[DeviceA-vlan200] port ethernet 1/0/2
[DeviceA-vlan200] quit
# Configure port Ethernet 1/0/3 as a trunk port, and assign it to VLANs 100 and 200, to enable
Ethernet 1/0/3 to forward traffic of VLANs 100 and 200 to Device B.
[DeviceA] interface ethernet 1/0/3
[DeviceA-Ethernet1/0/3] port link-type trunk
[DeviceA-Ethernet1/0/3] port trunk permit vlan 100 200
Please wait... Done.
2. Configure Device B as you configure Device A.
3. Configure Host A and Host C to be on the same network segment, 192.168.100.0/24, for
example. Configure Host B and Host D to be on the same network segment, 192.168.200.0/24,
for example.
102
To Next Page
Loading...
Need help?
General
