Basic vlan knowledge of Huawei

VLAN:
I. Causes of VLAN generation: Ethernet lacks forwarding Control Measures
Ii. VLAN technology goals: isolate broadcast and security
3. Implement VLAN
1. vlan TAG: TAG (4B: 2B TPID, 2B PRi + vlan id) without untag
2. vlan Division: Based on port, MAC, IP subnet, protocol, and Policy
3. vlan Interface Type:
Access
Trunk
Hybrid
Undo negotiation auto // The API prohibits self-negotiation.
4. vlan-related technologies
4.1 Mux vlan: provides a layer-2 traffic isolation mechanism between VLAN ports.
[Quidway] vlan batch 2 3 10
// Create a VLAN
[Quidway] vlan 10
[Quidway-vlan10] mux-vlan
// Configure the primary VLAN
[Quidway-vlan10] subordinate group 3
// Configure the interworking slave VLAN in the MUX VLAN
[Quidway-vlan10] subordinate separate 2
// Configure the isolated slave VLAN in the MUX VLAN
[Quidway] interface gigabitethernet1/0/1
[Quidway-GigabitEthernet1/0/1] port mux-vlan enable
// MUX-VLAN function under enable port
4.2 Super vlan
VLAN aggregation: Only IP addresses are configured on the super-VLAN interface, without assigning IP addresses to each sub-VLAN. All sub-VLANs share ip cidr blocks, solving the waste of IP Address resources.
4.3 ARP proxy
When no default gateway address is configured on the host (that is, you do not know how to reach the intermediary system of the Network), it can send an ARP request to request the MAC address of the target host. After receiving such a request, the switch that enables the ARP Proxy function uses its MAC address as a response to the ARP request, this allows hosts in different physical networks with the same network number to communicate with each other normally.
Method: routing vlan
4.4 VLAN mapping
VLAN transling is also called VLAN translation, which enables mutual conversion between user vlan id (Private VLAN) and carrier vlan id (Service VLAN, or public VLAN.
[Quidway-GigabitEthernet2/0/1] port trunk allow-pass vlan 100
// Configure the VLAN allowed by the interface, which is the VLAN after mapping
[Quidway-GigabitEthernet2/0/1] port vlan-mapping vlan 1 to 20 map-vlan 100
// Configure the uplink VLAN 1 ~ of interface 2/0/1 ~ 20 packets mapping into VLAN100
5. Port isolation
Port isolation is an access control security control mechanism between vswitch ports.
[Quidway] port-isolate mode all
// Configure the port Isolation Mode
[Quidway] interface gigabitethernet2/0/1
[Quidway-GigabitEthernet2/0/1] port-isolate enable
// Enable port isolation on port GE2/0/1
 
 
This article is from the "mry" blog