127
Configure an IP address for the
isolate-user-VLAN interface
ip address ip-address { mask |
mask-length } [ sub ]
This configuration is required
when users in the isolate-user-
VLAN need to communicate
with other networks at Layer 3.
This configuration is optional
when users in the isolate-user-
VLAN do not need to
communicate with other
networks at Layer 3.
By default, the isolate-user-VLAN
ID is not configured with any IP
address.
Configuring secondary VLANs
Follow these steps to configure secondary VLANs:
vlan { vlan-id1 [ to vlan-id2 ] |
all }
Isolate ports in the same secondary
VLAN at Layer 2
Optional
By default, ports in the same
secondary VLAN can
communicate at Layer 2.
This configuration takes effect
only after you associate the
secondary VLANs with an
isolate-user-VLAN.
Assign ports to each
secondary VLAN
and ensure that at
least one port in a
secondary VLAN
takes the secondary
VLAN as its PVID
For how to assign an access port
to a VLAN, see the chapter
―VLAN configuration.‖
Required
Use either approach
For how to assign a hybrid port
to a VLAN, see the chapter
―VLAN configuration.‖
Configure the isolate-user-VLAN type
of the port as downstream
port isolate-user-vlan host
Optional
By default, no isolate-user-VLAN
type is specified for the port.