PVLAN configuration instructions for Huawei 3COM vswitches

1. Introduction of PVLAN

740) this. width = 740 "border = undefined>

There is such a requirement in practical applications, as shown in the networking diagram.

3026 is associated with a cascade of 2016 and each port under 2016 is required to be isolated from each other, that is, each port is divided into a VLAN. At the same time, due to the fact that the number of VLANs on the upper-layer device is limited, do not allow the lower-layer device 2016) to pass through the VLAN, that is, the upstream port of 2016 must be set to access. However, an access port on port 2016 cannot belong to multiple VLANs. How can we send data packets with different VLAN IDs to the same access port? At this time, we need to use the 2016 PVLAN function. By using the PVLAN function, we can route all ports under 2016 in different VLANs and send them through the upstream Access port.

Currently, 2008/2016/3026 developed by Huawei 3Com support the PVLAN function.

 

2. PVLAN configuration steps

To configure PVLAN, follow these steps:

1. Create a VLAN,

The command is as follows:

[2016] vlan-id

2. Set the VLAN type to primary.

The command is as follows:

[2016-vlan100] isolate-user-vlan enable

3. Add ports to a VLAN. Both the primary vlan and the secondary vlan are the same)

The command is as follows:

[2016-vlan100] port ethernet port-list

4. Set the ing between the primary vlan and the secondary vlan.

The command is as follows:

[2, 2016] isolate-user-vlan primary_vlan_num secondary secondary_vlan_list

 

3. PVLAN configuration example

1. Networking requirements

The Quidway S3526 Ethernet switch connects two Quidway S2008 Ethernet switches over Ethernet 0/7 and Ethernet 0/8. VLAN5 on S2008 A is the primary VLAN, which includes the uplink port Ethernet 0/9 and two secondary VLANs: VLAN1 and VLAN2. VLAN1 includes the port Ethernet 0/1 and VLAN2 includes the port Ethernet 0/2; VLAN6 on S2008 B is the primary VLAN, which includes the uplink port Ethernet 0/9 and two secondary VLANs: VLAN3 and VLAN4. VLAN3 includes the port Ethernet 0/3 and VLAN4 includes the port Ethernet 0/4. From the S3526 perspective, each of the following S2008 has only one VLAN, S2008 A's VLAN5, and S2008 B's VLAN6.

2. Networking Diagram

740) this. width = 740 "border = undefined>

PVLAN configuration networking

3. configuration steps

The configuration process of S2008 is listed below.

Configure S2008

! Configure the primary vlan.

[S2008A] vlan 5

[S2008A-vlan5] isolate-user-vlan enable

[S2008A-vlan5] port ethernet0/9

! Configure the secondary VLAN.

[S2008A] vlan 1

[S2008A-vlan1] port ethernet0/1

[S2008A] vlan 2

[S2008A-vlan2] port ethernet0/2

! Configure the ing between the primary VLAN and the secondary VLAN

[S2008A] isolate-user-vlan primary 5 secondary 1-2

Configure S2008 B.

! Configure the primary vlan.

[S2008B] vlan 6

[S2008B-vlan6] isolate-user-vlan enable

[S2008B-vlan6] port ethernet0/9

! Configure the secondary VLAN.

[S2008B] vlan 3

[S2008B-vlan3] port ethernet0/3

[S2008B] vlan 4

[S2008B-vlan4] switchport ethernet0/4

! Configure the ing between the primary VLAN and the secondary VLAN

[S2008B] isolate-user-vlan primary 6 secondary 3-4

 

4. PVLAN usage considerations

1. In the current delivery version of Huawei 3Com: S3026V100R002B01D009, 2403FV200R003B01D003S2008/S2016), an Ethernet switch supports only one primary vlan and multiple ports can be specified for the primary vlan, one secondry VLAN can only contain one port. versions such as S3026V100R002B01D013 and 2403FV200R003B01D006S2008/S2016 support one switch with multiple primary VLANs, and one secondry vlan can also contain multiple ports.

2. Before executing the priing command between the primary vlan and the secondary vlan, the primary vlan and the secondary vlan must already contain ports, execute this command to complete the ing between the primary VLAN and the secondary VLAN. Specific operations include adding the uplink ports in the primary VLAN to each secondary VLAN, add the ports in the secondary VLAN to the primary VLAN.

3. Before establishing a ing relationship: when you set the priing relationship between the primary VLAN and the secondary VLAN in the PVLAN, the specified VLAN cannot be a VLAN that does not contain any port. After establishing a VLAN ing relationship, you cannot add or delete ports to or from the primary VLAN or the secondary vlan. It can only be executed after the ing is removed.

4. All ports in the primary vlan are not 802.1Q trunk ports, including uplink ports connected to other switches. The PVID of each port is the ID of the secondary vlan to which it belongs. The PVID of the uplink port is the ID of the primary vlan.