HP A5120 EI Series

126
2. Configure the secondary VLANs.
 Assign non-trunk ports to each secondary VLAN and configure these ports as downstream ports.
 To enable users in the isolate-user-VLAN to communicate with other networks at Layer 3,
configure VLAN interfaces for the secondary VLANs. Do not configure IP addresses for the
secondary VLAN interfaces.
3. Associate the isolate-user-VLAN with the specified secondary VLANs.
Configuring an isolate-user-VLAN
Follow these steps to configure an isolate-user-VLAN:
To do...
Use the command
Remarks
Enter system view
system-view
—
Create a VLAN and enter VLAN
view
vlan vlan-id
—
Configure the VLAN as an isolate-
user-VLAN
isolate-user-vlan enable
Required
Return to system view
quit
—
Assign ports to the
isolate-user-VLAN
and ensure that at
least one port takes
the isolate-user-VLAN
as its PVID
Access port
For how to assign an access
port to a VLAN, see the
chapter ―VLAN configuration.‖
Required
Use either approach.
Hybrid port
For how to assign a hybrid port
to a VLAN, see the chapter
―VLAN configuration.‖
Configure the isolate-user-VLAN type
of the port as upstream
port isolate-user-vlan
promiscuous
Optional
By default, no isolate-user-VLAN
type is specified for the port.
Return to system view
quit
—
Create the isolate-user-VLAN
interface and enter the isolate-user-
VLAN interface view
interface vlan-interface vlan-
interface-id
 This configuration is required
when users in the isolate-user-
VLAN need to communicate
with other networks at Layer 3.
 This configuration is optional
when users in the isolate-user-
VLAN do not need to
communicate with other
networks at Layer 3.
The vlan-interface-id argument
must take the isolate-user-VLAN
ID.