7-17 Isolate-User-VLAN ConfigurationWhen configuring an isolate-user VLAN, go to these sections for information you are interested in:z Overviewz Configuring Isolate-User-VLANz Displaying and Maintaining Isolate-User-VLANz Isolate-User-VLAN Configuration ExampleOverviewAn isolate-user-VLAN adopts a two-tier VLAN structure. In this approach, two types of VLANs,isolate-user-VLAN and secondary VLAN, are configured on the same device.The following are the characteristics of the isolate-user-VLAN implementation:z Isolate-user-VLANs are mainly used for upstream data exchange. An isolate-user-VLAN can beassociated with multiple secondary VLANs. As the upstream device is aware of only theisolate-user-VLAN but not the secondary VLANs, network configuration is simplified and VLANresources are saved.z You can isolate the Layer 2 traffic of different users by assigning the ports connected to them todifferent secondary VLANs. To enable communication between secondary VLANs associated withthe same isolate-user-VLAN, you can enable local proxy ARP on the upstream device to realizeLayer 3 communication between the secondary VLANs.As illustrated in the following figure, the isolate-user-VLAN function is enabled on Switch B. VLAN 10 isthe isolate-user-VLAN, and VLAN 2, VLAN 5, and VLAN 8 are secondary VLANs associated withVLAN 10 and are invisible to Switch A.Figure 7-1 An isolate-user-VLAN exampleConfiguring Isolate-User-VLANConfigure the isolate-user-VLAN through the following steps:1) Configure the isolate-user-VLAN;2) Configure the secondary VLANs;
