MUX-VLAN
The sub-VLANs in the MUX VLAN are divided into interoperable and isolated sub-VLANs. The ports in the interoperable sub-VLAN can communicate with each other.
The MUX VLAN must be configured with the MUX VLAN enable function on the port to realize the normal MUX VLAN function.
Experimental requirements
PC1 (host 1) is a file server, and both PC2 and PC3 need to access it. PC2 is the service department that can communicate with the entire local area network. In addition to intercommunication with the server, the finance department of PC3 is isolated from other areas.
Configure the PC1 port as a MUX-VLAN, the PC2 port as an interoperable slave VLAN, and the PC3 port as an isolated slave VLAN.
Note: All the hosts in the MUX-VLAN experiment are on the same network segment.
Experimental topology
Experimental configuration:
<Huawei>undo terminal monitor //关闭终端显示
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname SW1 //给设备命名SW1
[SW1]vlan batch 10 20 30 //创建VLAN
将接口加入相应vlan
[SW1]interface GigabitEthernet 0/0/1 //进入接口G0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access //配置端口1类型为access
[SW1-GigabitEthernet0/0/1]port default vlan 10 //将接口1加入vlan10
[SW1-GigabitEthernet0/0/1]quit //退出
[SW1]interface gigabitethernet 0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access
[SW1-GigabitEthernet0/0/2]port default vlan 20
[SW1-GigabitEthernet0/0/2]quit
[SW1]interface gigabitethernet 0/0/3
[SW1-GigabitEthernet0/0/3]port link-type access
[SW1-GigabitEthernet0/0/3]port default vlan 30
[SW1-GigabitEthernet0/0/3]quit
[SW1-vlan10]mux-vlan //配置 主vlan
[SW1-vlan10]subordinate group 20 //配置mux vlan中的互通型从vlan
[SW1-vlan10]subordinate separate 30 //配置mux vlan中的隔离型从vlan
[SW1-vlan10]quit
使能端口下的mux-vlan功能
[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]port mux-vlan enable
[SW1-GigabitEthernet0/0/1]quit
[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]port mux-vlan enable
[SW1-GigabitEthernet0/0/2]quit
[SW1]interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3]port mux-vlan enable
[SW1-GigabitEthernet0/0/3]quit
After configuring the test:
Host 3 is in VLAN 30, which belongs to an isolated VLAN. It cannot communicate with VLAN 20 (Host 2).
Host 1 can communicate with Host 2 and Host 3.