Operation Manual – Extended VLAN ApplicationH3C S7500 Series Ethernet Switches Chapter 2 Isolate-User-VLAN Configuration2-1Chapter 2 Isolate-User-VLAN ConfigurationWhen configuring isolate-user-VLAN, go to these sections for information you areinterested in:z Isolate-User-VLAN Overviewz Isolate-User-VLAN Configurationz Displaying Isolate-User-VLAN Configurationz Isolate-User-VLAN Configuration Example2.1 Isolate-User-VLAN Overview2.1.1 Introduction to Isolate-User-VLANIsolate-user-VLAN is designed for saving VLAN resource by means of copying MACaddress entries among the MAC address tables of VLANs, utilizing the feature that aHybrid port can remove the VLAN tags of packets of multiple VLANs.Isolate-user-VLAN adopts Layer 2 VLAN structure, and you need to configure twotypes of VLANs, isolate-user-VLAN and secondary VLAN.An isolate-user-VLAN corresponds to multiple secondary VLANs. By configuring portsas Hybrid ports, you can make ports of all secondary VLANs and the uplink port of theswitch all included in the isolate-user-VLAN. At the same time, you should configurethat the uplink port removes the VLAN tags of all secondary VLAN packets whenforwarding them.In this case, for the upper layer switch, all the packets received from the lower streamare without VLAN tags. Therefore, the switch can reset the local VLAN structure to saveVLAN resource without considering the VLAN configuration in the lower layer.2.1.2 Isolate-User-VLAN Packets Forwarding ProcessFigure 2-1 is the diagram for isolate-user-VLAN application. The following contentdescribes the isolate-user-VLAN packets forwarding process based on this figure.I. Configure Switch Bz Configure port Ethernet 1/0/4 as a Hybrid port, with the default VLAN ID being 3.This port belongs to both VLAN 3 and VLAN 5 (the isolate-user-VLAN), andperforms untag operation (removing of VLAN tag) on packets coming from VLAN 3and VLAN 5.z Configure port Ethernet 1/0/1 as a Hybrid port, with the default VLAN ID being 5.This port belongs to both VLAN 3 and VLAN 5, and performs untag operation(removing of VLAN tag) on packets coming from VLAN 3 and VLAN 5.
