Table of Contents

Related Documents

05-Extended VLAN Application Commands

Title	Size	Download
05-Extended VLAN Application Commands	120 KB

Chapter 1 Voice VLAN Configuration Commands

1.1 Voice VLAN Configuration Commands

1.1.1 display voice vlan oui

Syntax

display voice vlan oui

View

Any view

Parameters

None

Description

Use the display voice vlan oui command to display the currently supported OUI addresses and the related information.

Related commands: voice vlan, voice vlan enable.

Examples

# Display the OUI addresses of the voice VLAN.

<H3C> display voice vlan oui

Oui Address Mask Description

00e0-bb00-0000 ffff-ff00-0000 3com phone

0003-6b00-0000 ffff-ff00-0000 Cisco phone

00e0-7500-0000 ffff-ff00-0000 Polycom phone

00d0-1e00-0000 ffff-ff00-0000 Pingtel phone

000f-e200-0000 ffff-ff00-0000 H3C Aolynk phone

00aa-bb00-0000 ffff-ff00-0000 ABC

1.1.2 display voice vlan status

Syntax

display voice vlan status

View

Any view

Parameters

None

Description

Use the display voice vlan status command to display voice VLAN-related information, including voice VLAN status (disabled/enabled), security mode, aging time, port voice VLAN mode (manual mode or automatic mode), and so on.

Related commands: voice vlan, voice vlan enable.

Examples

# Display information about the voice VLAN.

<H3C> display voice vlan status

Voice Vlan status: ENABLE

Voice Vlan ID: 2

Voice Vlan security mode: Security

Voice Vlan aging time: 1440 minutes

Current voice vlan enabled port mode:

PORT MODE

--------------------------------

Ethernet1/0/2 MANUAL

Ethernet1/0/5 AUTO

Table 1-1 Description on the fields of the display voice vlan status command

Field	Description
Voice Vlan status	The status of global voice VLAN function: enabled/disabled
Voice Vlan ID	The VLAN which is currently enabled with voice VLAN function.
Voice Vlan security mode	The status of voice VLAN security mode: enabled/disabled.
Voice Vlan aging time	The voice VLAN aging time
Current voice vlan enabled port mode	The operation mode of ports with the voice VLAN function enabled
Ethernet1/0/2 MANUAL	Port Ethernet 1/0/2 is in manual mode.
Ethernet1/0/5 AUTO	Port Ethernet 1/0/5 is in automatic mode.

Caution:

The “Current voice vlan enable port mode” field lists the ports with the voice VLAN function enabled. Note that a port listed in this field may not currently operate in a voice VLAN. To check the ports operating in the current voice VLAN, use the display vlan command, which is described in section display vlan.

1.1.3 display vlan

Syntax

display vlan vlan-id

View

Any view

Parameters

vlan-id: Voice VLAN ID in the range of 1 to 4,094.

Description

Use the display vlan command to display the automatic/manual ports in the current voice VLAN.

Related commands: voice vlan.

Examples

# Display the ports included in the current voice VLAN (the current voice VLAN is VLAN 6).

<H3C> display vlan 6

VLAN ID: 6

VLAN Type: static

Route Interface: not configured

Description: VLAN 0006

Name: VLAN 0006

Tagged Ports:

GigabitEthernet1/0/5

Untagged Ports:

GigabitEthernet1/0/6

The output indicates that GigabitEthernet 1/0/5 and GigabitEthernet 1/0/6 ports are in the current voice VLAN.

1.1.4 voice vlan

Syntax

voice vlan vlan-id enable

undo voice vlan enable

View

System view

Parameters

vlan-id: ID of the VLAN that needs to be enabled with the voice VLAN function, ranging from 2 to 4,094.

Description

Use the voice vlan command to enable the voice VLAN function globally.

Use the undo voice vlan enable command to disable the voice VLAN function globally.

Caution:

l When you are enabling the voice VLAN function for a specified VLAN, the specified VLAN must exist; otherwise, your configuration will be failed.

l Before you can delete a VLAN with voice VLAN enabled, you must disable the voice VLAN function first.

l There can be only one voice VLAN at a time.

Related commands: display voice vlan status.

Examples

# Enable the voice VLAN function for VLAN 2.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] vlan 2

[H3C-vlan2] quit

[H3C] voice vlan 2 enable

# After VLAN 2 is configured as the voice VLAN, if you enable the voice VLAN function for other VLANs, the system will prompt that your configuration fails.

[H3C] voice vlan 4 enable

Can't change voice vlan configuration when other voice vlan is running

1.1.5 voice vlan aging

Syntax

voice vlan aging minutes

undo voice vlan aging

View

System view

Parameters

minutes: Aging time (in minutes) to be set for the voice VLAN. This argument ranges from 5 to 43,200 and defaults to 1,440.

Description

Use the voice vlan aging command to set the aging time for the voice VLAN.

Use the undo voice vlan aging command to restore the default aging time for the voice VLAN.

Related commands: display voice vlan status.

Examples

# Set the aging time of the voice VLAN to 100 minutes.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] voice vlan aging 100

1.1.6 voice vlan enable

Syntax

voice vlan enable

undo voice vlan enable

View

Ethernet port view

Parameters

None

Description

Use the voice vlan enable command to enable voice VLAN for a port.

Use the undo voice vlan enable command to disable voice VLAN for a port.

l The voice VLAN function takes effect on a port only when it is enabled in both system view and port view.

l An access port whose voice VLAN mode is automatic does not support the voice vlan enable command.

Related commands: display voice vlan status.

Examples

# Enable the voice VLAN function for Ethernet 1/0/2.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet 1/0/2

[H3C-Ethernet1/0/2] voice vlan enable

1.1.7 voice vlan mac-address

Syntax

voice vlan mac-address oui mask oui-mask [ description text ]

undo voice vlan mac-address oui

View

System view

Parameters

oui: MAC address to be set. You need to provide this argument in the format of H-H-H.

& Note:

Organizationally unique identifier (OUI) is the first 24 bits of a MAC address. It is the globally unique identifier assigned by IEEE for different device suppliers.

oui-mask: MAC address mask in the format of H-H-H. This argument specifies the valid bits of the MAC address.

text: Description string of the MAC address. This argument can contain 1 to 30 characters.

Description

Use the voice vlan mac-address command to set a MAC address used for a voice VLAN to identify voice devices.

Use the undo voice vlan mac-address command to disable a MAC address from being used to identify voice devices.

A switch can use up to 16 MAC addresses to identify voice devices, including the five default OUI addresses (as listed in Table 1-2). When the number of MAC addresses reaches to 16, you will fail to add new MAC addresses.

Table 1-2 Default OUI addresses of a switch

Number	OUI Address	Vendor
1	00e0-bb00-0000	3com phone
2	0003-6b00-0000	Cisco phone
3	00e0-7500-0000	Polycom phone
4	00d0-1e00-0000	Pingtel phone
5	000f-e200-0000	H3C Aolynk phone

Related commands: display voice vlan oui.

Examples

# Specify 00aa-bb00-0000 as the OUI address that can be identified by the device, with the description string being ABC.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] voice vlan mac-address 00aa-bb00-0000 mask ffff-ff00-0000 description ABC

1.1.8 voice vlan mode

Syntax

voice vlan mode auto

undo voice vlan mode auto

View

Ethernet port view

Parameters

None

Description

Use the voice vlan mode auto command to set the voice VLAN mode of the port to automatic.

Use the undo voice vlan mode auto command to restore the voice VLAN mode of the port to manual mode.

By default, the voice VLAN mode of the port is automatic mode.

Related commands: display voice vlan status.

Examples

# Set the voice VLAN mode of GigabitEthernet 3/0/2 to manual.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface GigabitEthernet 3/0/2

[H3C-GigabitEthernet3/0/2] undo voice vlan mode auto

1.1.9 voice vlan security enable

Syntax

voice vlan security enable

undo voice vlan security enable

View

System view

Parameters

None

Description

Use the voice vlan security enable command to enable the voice VLAN security mode.

Use the undo voice vlan security enable command to disable the voice VLAN security mode.

In the voice VLAN security mode, the voice device access port in the voice VLAN can only transmit voice data. Packets with their MAC addresses not among the OUI addresses that can be identified by the system will be dropped. This mode has no effect on other VLANs.

When the voice VLAN security mode is disabled, the voice VLAN can transmit both voice and service data.

By default, the voice VLAN security mode is enabled.

Related commands: display voice vlan status.

Examples

# Disable the voice VLAN security mode.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] undo voice vlan security enable

Chapter 2 Isolate-User-VLAN Configuration Commands

& Note:

You need to configure the hybrid attribute for a port in the process of configuring an isolate-user-VLAN. For hybrid port-related commands, refer to the Port Basic Configuration part of the H3C S7500 Series Ethernet Switches Command Manual.

2.1 Isolate-User-VLAN Configuration Commands

2.1.1 display isolate-user-vlan

Syntax

display isolate-user-vlan [ vlan-id ]

View

Any view

Parameters

vlan-id: VLAN ID of the configured isolate-user-VLAN, ranging from 1 to 4,094.

Description

Use the display isolate-user-vlan command to display the mapping between the isolate-user-VLAN and the secondary VLANs, and the current status and port information of the isolate-user-VLAN and the secondary VLANs.

Related commands: isolate-user-vlan enable, isolate-user-vlan.

Examples

# Display the mapping between the isolate-user-VLAN and the secondary VLANs.

<H3C> display isolate-user-vlan

Isolate-user-VLAN Vlan ID : 3

Secondary Vlan ID : 4-5

Vlan ID: 3

Vlan Type: static

Isolate-user-VLAN type : isolate-user-VLAN

Route Interface: not configured

Description: VLAN 0003

Tagged Ports: none

Untagged Ports:

Ethernet1/0/4 Ethernet1/0/8 Ethernet1/0/18

Vlan ID: 4

Vlan Type: static

Private-vlan Type : Secondary

Route Interface: not configured

Description: VLAN 0004

Tagged Ports: none

Untagged Ports:

Ethernet1/0/4 Ethernet1/0/8

Vlan ID: 5

Vlan Type: static

Private-vlan Type : Secondary

Route Interface: not configured

Description: VLAN 0004

Tagged Ports: none

Untagged Ports:

Ethernet1/0/4 Ethernet1/0/18

2.1.2 isolate-user-vlan

Syntax

isolate-user-vlan vlan-id secondary vlan-list

undo isolate-user-vlan vlan-id [ secondary vlan-list ]

View

System view

Parameters

vlan-id: VLAN ID of an isolate-user-VLAN, ranging from 1 to 4,094.

vlan-list: List of the secondary VLANs that need to establish mapping with the isolate-user-VLAN, provided in the form of vlan-list = { vlan-id [ to vlan-id ] }&<1-4093>, where the vlan-id is the VLAN ID of the secondary VLAN. VLAN ID after to must not be less than that before to. You can input this argument repeatedly to establish the mapping between the isolate-user-VLAN and all other VLANs.

Description

Use the isolate-user-vlan command to establish the mapping between the isolate-user-VLAN and the secondary VLANs.

Use the undo isolate-user-vlan command to cancel the mapping between the isolate-user-VLAN and the secondary VLANs.

Without secondary vlan-list, the undo isolate-user-vlan command cancels the mapping between all the secondary VLANs and the specified isolate-user-VLAN. With secondary vlan-list specified, the command cancels the mapping between the specified secondary VLANs and the specified isolate-user-VLAN.

Note that, establishing or canceling the mapping between the isolate-user-VLAN and the secondary VLANs does not affect the port status in each VLAN.

By default, the user-created isolate-user-VLAN and secondary VLANs have no mapping relationship.

Related commands: display isolate-user-vlan.

Examples

# Map isolate-user-VLAN 10 with secondary VLAN 2, 3, 4, 5, and 9.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] isolate-user-vlan 10 secondary 2 to 5 9

2.1.3 isolate-user-vlan enable

Syntax

isolate-user-vlan enable

undo isolate-user-vlan enable

View

VLAN view

Parameters

None

Description

Use the isolate-user-vlan enable command to configure a VLAN as an isolate-user-VLAN.

Use the undo isolate-user-vlan enable command to cancel the configuration.

By default, no VLAN is enabled with the isolate-user-VLAN function.

Caution:

l Multiple isolate-user-VLANs can be configured for a switch.

l You cannot configure isolate-user-VLAN for a switch that is enabled with GVRP.

l You cannot enable both isolate-user-VLAN and super VLAN functions for one VLAN. If a VLAN is configured as an isolate-user-VLAN or a secondary VLAN, you cannot configure it as a super VLAN or a sub VLAN.

Related commands: display isolate-user-vlan.

Examples

# Configure VLAN 5 as an isolate-user-VLAN.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] vlan 5

[H3C-vlan5] isolate-user-vlan enable

Chapter 3 Super VLAN Configuration Commands

& Note:

Only Salience III series engines support this feature.

3.1 Super VLAN Configuration Commands

3.1.1 dhcp-server

Syntax

dhcp-server groupNo

undo dhcp-server

View

VLAN interface view

Parameters

groupNo: DHCP server number, ranging from 0 to 19.

Description

Use the dhcp-server command to map the VLAN interface to a DHCP server group.

Use the undo dhcp-server command to cancel this mapping.

Examples

# Map VLAN-interface1 to DHCP server group 1.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Vlan-interface 1

[H3C-Vlan-interface1] dhcp-server 1

3.1.2 display supervlan

Syntax

display supervlan [ supervlan-id ]

View

Any view

Parameters

supervlan-id: ID of Super VLAN, range from 1 to 4,094.

Description

Use the display supervlan command to display the mapping between a Super VLAN and Sub VLANs, and the ports included in the sub VLANs.

Related commands: supervlan, subvlan.

Examples

# Display the mapping relationship between Super VLAN 100 and the sub VLANs.

<H3C> display supervlan 100

Supervlan ID : 100

Subvlan ID : 101-102

VLAN ID: 100

VLAN Type: static

It is a Super VLAN.

Route Interface: not configured

Description: VLAN 0100

Name: VLAN 0100

Broadcast MAX-ratio: 100

Tagged Ports: none

Untagged Ports: none

VLAN ID: 101

VLAN Type: static

It is a Sub VLAN. And the Super VLAN is VLAN 100

ARP proxy disabled.

Route Interface: not configured

Description: VLAN 0101

Name: VLAN 0101

Broadcast MAX-ratio: 100

Tagged Ports: none

Untagged Ports:

Ethernet3/0/3

VLAN ID: 102

VLAN Type: static

It is a Sub VLAN. And the Super VLAN is VLAN 100

ARP proxy disabled.

Route Interface: not configured

Description: VLAN 0102

Name: VLAN 0102

Broadcast MAX-ratio: 100

Tagged Ports: none

Untagged Ports:

Ethernet3/0/4

3.1.3 subvlan

Syntax

subvlan vlan-list

undo subvlan [ vlan-list ]

View

VLAN view of the super VLAN

Parameters

vlan-list: List of sub VLANs, provided in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where vlan-id is the VLAN ID of a sub VLAN, and the &<1-10> means you can specify ten sub VLANs or sub VLAN lists.

Description

Use the subvlan commmand to establish the mapping relationship between sub VLANs and the super VLAN.

Use the undo subvlan commmand to cancel the mapping relationship between sub VLANs and the super VLAN.

Without the vlan-list argument, the undo subvlan command cancels the mapping between all sub VLANs and the super VLAN. With this argument, the command cancels the mapping between the specified sub VLANs and the super VLAN.

Caution:

l The sub VLANs must exist before you create mapping between the sub VLANs and the super VLAN.

l After establishing the mapping between the sub VLANs and the super VLAN, you can still add (or remove) ports to (from) the sub VLANs.

l The system allows for up to 1024 sub VLANs.

Related commands: display supervlan.

Examples

# Establish the mapping relationship between sub VLAN 3, 4, 5, 9 and super VLAN 10.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] vlan 10

[H3C-vlan10] supervlan

[H3C-vlan10] subvlan 3 to 5 9

3.1.4 supervlan

Syntax

supervlan

undo supervlan

View

VLAN view

Parameters

None

Description

Use the supervlan commmand to configure the current VLAN to be a super VLAN.

Use the undo supervlan commmand to restore the current VLAN type to ordinary VLAN.

Note that:

l You can not configure a VLAN which includes Ethernet ports as a super VLAN; and after you configure a super VLAN, you cannot add any Ethernet port to it.

l When a VLAN is configured as a super VLAN, proxy ARP function is automatically enabled on the VLAN interface.

l When a super VLAN exists, the proxy ARP function cannot be disabled on the corresponding VLAN interface.

Related commands: display supervlan.

Examples

# Configure VLAN 2 to be a super VLAN.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] vlan 2

[H3C-vlan2] supervlan

H3C S7500 Series Command Manual(Release 3100 Series)-(V1.04)

1.1.9 voice vlan security enable

2.1.1 display isolate-user-vlan

2.1.3 isolate-user-vlan enable

Chapter 3 Super VLAN Configuration Commands

3.1 Super VLAN Configuration Commands

Cloud & AI

InterConnect

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Resources

Partner Business Management

Company Information

News & Events

Contact Us