152Isolate-user-VLAN configuration exampleNetwork requirementsAs shown in Figure 49:• Connect Device A to downstream devices Device B and Device C.• Configure VLAN 5 on Device B as an isolate-user-VLAN, assign the uplink port Ethernet 1/0/5 toVLAN 5, and associate VLAN 5 with secondary VLANs VLAN 2 and VLAN 3. Assign Ethernet1/0/2 to VLAN 2 and Ethernet 1/0/1 to VLAN 3.• Configure VLAN 6 on Device C as an isolate-user-VLAN, assign the uplink port Ethernet 1/0/5 toVLAN 6, and associate VLAN 6 with secondary VLANs VLAN 3 and VLAN 4. Assign Ethernet1/0/3 to VLAN 3 and Ethernet 1/0/4 to VLAN 4.• As far as Device A is concerned, Device B only has VLAN 5 and Device C only has VLAN 6.Figure 49 Network diagramConfiguration procedureThe following part provides only the configuration on Device B and Device C.1. Configure Device B:# Configure the isolate-user-VLAN. system-view[DeviceB] vlan 5[DeviceB-vlan5] isolate-user-vlan enable[DeviceB-vlan5] quit# Create secondary VLANs.[DeviceB] vlan 2 to 3# Associate the isolate-user-VLAN with the secondary VLANs.[DeviceB] isolate-user-vlan 5 secondary 2 to 3# Configure the uplink port Ethernet 1/0/5 to operate in promiscuous mode in VLAN 5.[DeviceB] interface ethernet 1/0/5[DeviceB-Ethernet1/0/5] port isolate-user-vlan 5 promiscuous[DeviceB-Ethernet1/0/5] quit
