130
Step Command Remarks
2. Enter VLAN view.
vlan
vlan-id
If the specified VLAN does not exist, this
command first creates the VLAN and
enters VLAN view of this VLAN.
3. Create a protocol
template for the VLAN.
protocol-vlan
[ protocol-index ] {
at
|
ipv4
|
ipv6
|
ipx
{
ethernetii
|
llc
|
raw
|
snap
} |
mode
{
ethernetii
etype
etype-id |
llc
{
dsap
dsap-id [
ssap
ssap-id ]
|
ssap
ssap-id } |
snap
etype
etype-id } }
By default, no protocol template is
configured for a VLAN.
4. Exit VLAN view.
quit
N/A
5. Enter interface view.
• Enter Layer 2 Ethernet
interface view:
interface interface-type
interface-number
• Enter Layer 2 aggregate
interface view:
interface
bridge-aggregation
interface-number
• The configurations made in Layer 2
Ethernet interface view apply only
to the port.
• The configurations made in Layer 2
aggregate interface view apply to
the aggregate interface and its
aggregation member ports. If the
system fails to apply the
configurations to the aggregate
interface, it stops applying the
configurations to aggregation
member ports. If the system fails to
apply the configurations to an
aggregation member port, it skips
the port and moves to the next
member port.
6. Configure the port link
type as hybrid.
port link-type hybrid
By default, all ports are access ports.
7. Assign the hybrid port to
the specified
protocol-based VLANs.
port hybrid vlan
vlan-id-list
{
tagged
|
untagged
}
By default, a hybrid port is an untagged
member of the VLAN to which the port
belongs when its link type is
access
.
8. Associate the hybrid port
with the specified
protocol-based VLAN.
port hybrid protocol-vlan
vlan
vlan-id { protocol-index
[
to
protocol-end ] |
all
}
By default, a port is not associated with
any protocol-based VLANs.
Configuring a VLAN group
After you configure a VLAN group on the device, the authentication sever can assign the VLAN
group name to the 802.1X user that passes authentication. The VLAN group name identifies this
group of VLANs. For more information about 802.1X authentication, see Security Configuration
Guide.
To configure a VLAN group:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create a VLAN group and
enter VLAN group view.
vlan-group
group-name By default, no VLAN group exists.
3. Add VLANs to the VLAN
group.
vlan-list
vlan-id-list
By default, no VLAN exists in a
VLAN group.
To Next Page
Loading...
Need help?
General