Step 2 Verify the configuration.
Ping any host in VLAN 3 from a host in VLAN 2. The ping operation fails. This indicates that
Department 1 and Department 2 are isolated from Department 3 and Department 4.
Ping any host in Department 2 from a host in Department 1. The ping operation is successful.
This indicates that Department 1 and Department 2 can communicate with each other.
Ping any host in Department 4 from a host in Department 3. The ping operation is successful.
This indicates that Department 3 and Department 4 can communicate with each other.
----End
Configuration Files
The following lists the configuration file of the Switch.
#
sysname Quidway
#
vlan batch 2 to 3
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk allow-pass vlan 2
#
interface GigabitEthernet1/0/2
port link-type trunk
port trunk allow-pass vlan 2
#
interface GigabitEthernet1/0/3
port link-type trunk
port trunk allow-pass vlan 3
#
interface GigabitEthernet1/0/4
port link-type trunk
port trunk allow-pass vlan 3
#
return
3.12.2 Example for Configuring MAC Address-based VLAN
Assignment
MAC address-based VLAN assignment is applicable only to simple networks where network
adapters are not changed frequently.
Networking Requirements
On the intranet of a company, the network administrator adds PCs of employees in a department
to the same VLAN. To improve information security, only employees is this department are
allowed to access the intranet.
As shown in Figure 3-11, only PC1, PC2, and PC3 are allowed to access the intranet through
SwitchA and Switch.
Quidway S7700 Smart Routing Switch
Configuration Guide - Ethernet 3 VLAN Configuration
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
120