string: Description character string of current VLAN or VLAN interface. The character string contains 1 to 64 characters. The default description character string of current VLAN is the VLAN ID of the VLAN, e.g. VLAN 0001. The default description character string of VLAN interface is the interface name, e.g., “vlan-interface1 interface”.

Descriptions

Use the description command to configure a description for the current VLAN or VLAN interface.

Use the undo description command to restore the default description of current VLAN or VLAN interface.

Related commands: display vlan, display ip-subnet-vlan interface.

Example

# Specify a description character string “RESEARCH” for the current VLAN.

[H3C-vlan1] description RESEARCH

1.1.2 display interface vlan-interface

Syntax

display interface vlan-interface [ vlan-id ]

View

Any view

Parameters

vlan-id: Specifies VLAN ID.

Description

Use the display interface vlan-interface command to view the related information about specified or all VLAN interfaces, including physical protocol status and link protocol status of VLAN interface, Ethernet sending frame format, MAC address, IP address and sub-net mask, description character string and MTU, etc.

With vlan-id specified, only the information about the specified VLAN interface will be displayed. If no vlan-id is specified, the information about all the existing VLAN interfaces will be displayed.

Related commands: interface vlan-interface.

Examples

# Display related information about VLAN-interface 1.

<H3C> display interface vlan-interface 1

Vlan-interface1 current state : DOWN

Line protocol current state : DOWN

IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc07-4101

Internet Address is 10.1.1.1/24 Primary

Description : Vlan-interface1 Interface

The Maximum Transmit Unit is 1500

Table 1-1 Description on the fields of the display interface Vlan-interface command

Field	Description
Vlan-interface1 current state	Current state of the VLAN interface
Line protocol current state	Current state of the Line protocol
IP Sending Frames' Format	Format of the IP sending frames
Hardware address	Corresponding MAC address of the VLAN interface
Internet Address	IP address
Description	Description of the VLAN interface
The Maximum Transmit Unit	Maximum Transmit Unit (MTU)

1.1.3 display vlan

Syntax

display vlan [ vlan-id to vlan-id | all | static | dynamic ]

View

Any view

Parameters

vlan-id: Displays information of the specified VLAN.

all: Displays information of all VLANs.

static: Displays information of VLANs created statically by the system.

dynamic: Displays information of VLANs created dynamically by the system.

Description

Use the display vlan command to view related information about the specified or all VLANs.

If vlan-id or all is specified, information of specified VLAN or all VLANs is displayed. It includes: VLAN ID, VLAN type (dynamic or static), whether the routing function has been enabled on this VLAN (if enabled, the main IP address and mask will be displayed), VLAN description, and the ports VLAN contains.

If parameter is not specified, information of the VLANs that has been created is displayed. If the parameter dynamic or static is selected, information of VLANs created dynamically or statically by the system is displayed.

Related commands: interface vlan-interface.

Examples

# Display the information about VLAN 2.

<H3C> display vlan 2

VLAN ID: 2

VLAN Type: static

Route Interface: not configured

Description: VLAN 0002

Name: VLAN 0002

Tagged Ports:

GigabitEthernet3/3/2 GigabitEthernet3/3/3

Untagged Ports: none

Table 1-2 Description on the fields of the display vlan 2 command

Field	Description
VLAN ID	VLAN ID
VLAN Type	Configuration type of VLAN: either dynamic or static
Route interface	Whether the route interface exists
Description	VLAN description
Name	VLAN name
Tagged Ports	Ports through which packets of this VLAN are sent with VLAN tag kept
Untagged Ports	Ports through which packets of this VLAN are sent with VLAN tag stripped off

1.1.4 interface vlan-interface

Syntax

interface vlan-interface vlan-id

undo interface vlan-interface vlan-id

View

System view

Parameters

vlan-id: ID of VLAN interface, ranging from 1 to 4094.

Description

Use the interface vlan-interface command to configure VLAN interface or enter VLAN interface view.

Use the undo interface vlan-interface command to cancel one VLAN interface.

Related commands: display interface vlan-interface.

Examples

# Enter the view of the VLAN-interface 1.

[H3C] interface vlan-interface 1

1.1.5 name

Syntax

name string

undo name

View

VLAN view

Parameters

string: Name of the current VLAN, a string of 1 to 32 characters. The default value is the VLAN ID of the VLAN.

Description

Use the name command to name the current VLAN.

Use the undo name command to restore the default name of the current VLAN.

By default, the name of the current VLAN is the VLAN ID of the VLAN.

Examples

# Name the current VLAN 2 “hello”.

[H3C-vlan2] name hello

1.1.6 shutdown

Syntax

shutdown

undo shutdown

View

VLAN interface view

Parameters

None

Description

Use the shutdown command to disable the VLAN interface.

Use the undo shutdown command to enable the VLAN interface.

By default, when all the Ethernet ports in a VLAN are in the Down state, this VLAN interface is also Down. When there are one or more Ethernet ports in the Up state, this VLAN interface is also Up.

This command can be used to start interface after the related parameters and protocols of VLAN interface are set. Or when the VLAN interface fails, the interface can be shut down first and then restarted. In this way, the interface may be restored to normal status.

Shutting down or bringing up a VLAN interface will not affect any Ethernet port of this VLAN.

Examples

# Shut down VLAN-interface 2.

[H3C-Vlan-interface2] shutdown

1.1.7 vlan

Syntax

vlan vlan-id-list

undo vlan { vlan-id [ to vlan-id ] | all }

View

System view

Parameters

vlan-id-list: vlan-id-list = vlan-id1 [ to vlan-id2 ]&<1-10>, specifies the range of VLANs to be created. The value range of vlan-id is 1 to 4094. &<1-10> means that you can specify up to 10 VLANs or VLAN lists.

all: Specifies all VLANs.

Description

Use the vlan vlan-id-list command to enter VLAN view or to create a range of VLANs.

Use the undo vlan command to delete the specified or all VLANs.

If only one VLAN is created, the system will automatically enter the view of the VLAN just created.

Related commands: display vlan.

Examples

# Create VLANs 5, 20, 21, 22, 23, 24, 400, 1002, 1003, 1004, and 2000.

<H3C> system-view

[H3C] vlan 5 20 to 24 400 1002 to 1004 2000

Caution:

l VLAN 1 is the system-default VLAN and cannot be removed.

l A VLAN that contains a VLAN VPN-enabled port cannot be removed.

l A Guest VLAN cannot be removed.

l A protocol-enabled VLAN cannot be removed.

l Dynamic VLANs cannot be deleted, and the system will not prompt this if you use the undo vlan command to delete dynamic VLAN(s).

1.2 Port-Based VLAN Configuration Commands

1.2.1 port

Syntax

port interface-list

undo port interface-list

View

VLAN view

Parameters

interface-list: Ethernet port list. You can specify a port in the list in the form of interface-type interface-number where interface-type is the port type and interface-number is the port number. Alternatively, you can specify a port range in the form of interface-type interface-number to interface-type interface-number where the end port must be greater than the start port.

Description

Use the port command to assign one port or one group of ports to VLAN.

Use the undo port command to remove one port or one group of ports from VLAN.

Note that you can assign/remove trunk ports and hybrid ports to/from a VLAN with the port and undo port commands in Ethernet port view, but not in VLAN view.

Related commands: display vlan.

Examples

# Assign Ethernet 2/1/1 through Ethernet 2/1/3 to VLAN 2.

[H3C-vlan2] port ethernet2/1/1 to ethernet2/1/3

1.3 Protocol-Based VLAN Configuration Commands

1.3.1 display protocol-vlan interface

Syntax

display protocol-vlan interface { interface-list | all }

View

Any view

Parameters

all: Displays the protocol information of all ports.

Description

Use the display protocol-vlan interface command to display information about the protocol(s) and their indexes configured on the specific port(s) or all ports.

When configuring protocol VLANs, you can use this command to make protocol add/removal decisions.

Examples

# Display the protocol information of protocol VLANs on Ethernet 2/1/1.

<H3C> display protocol-vlan interface ethernet2/1/1

Interface: Ethernet2/1/1

Vlan-ID Index Type Value

10 0 at

10 1 ethernetii etype 0x0600

10 2 llc dsap 0x01 ssap 0x02

10 3 snap etype 0x0700

10 4 ipx ethernetii

10 5 ipx llc

10 6 ipx raw

10 7 ipx snap

1.3.2 display protocol-vlan vlan

Syntax

display protocol-vlan vlan { vlan-list | all }

View

Any view

Parameters

vlan-list: VLAN list. You can specify a VLAN in the list by its ID. Alternatively, you can specify a VLAN range in the form of vlan-id to vlan-id where the end VLAN must be greater than the start port.

all: Specifies to display protocol information of all VLANs.

Description

Use the display protocol-vlan vlan command to display the protocols and protocol indexes configured in the specified VLAN(s) or all VLANs.

Examples

# Display the protocols and protocol indexes configured in VLAN 522.

<H3C> display protocol-vlan vlan 522

VLAN ID: 522

VLAN Type: Protocol-based VLAN

Index Type Value

0 at

1 ethernetii etype 0x0600

2 llc dsap 0x01 ssap 0x02

3 snap etype 0x0700

4 ipx ethernetii

5 ipx llc

6 ipx raw

7 ipx snap

1.3.3 port hybrid protocol-vlan vlan

Syntax

port hybrid protocol-vlan vlan vlan-id { vlan-protocol-list | all }

undo port hybrid protocol-vlan { vlan vlan-id { vlan-protocol-list | all } | all }

View

Ethernet port view

Parameters

vlan-id: Specifies the ID of the VLAN where protocols are to be applied/removed.

{ vlan-protocol-list | all }: Specify a VLAN protocol list to be applied/removed to/from the port with the vlan-protocol-list argument or all the VLAN protocols in the specified VLAN. Specify a protocol by its protocol index for the vlan-protocol-list argument or specify a range of protocols in the form of start-protocol-index to end-protocol-index for the vlan-protocol-list argument, where start-protocol-index and end-protocol-index are protocol indexes and the end protocol index must be greater than the start one.

all: Specifies to apply/remove all the protocols to/from a port.

Description

Use the port hybrid protocol-vlan vlan command to apply a protocol-based VLAN to a specified port.

Use the undo port hybrid protocol-vlan vlan command to remove the specified protocol-based VLAN or to remove protocols from the specified VLAN on the port.

Use the undo port hybrid protocol-vlan all command to remove all the specified protocol-based VLANs configured on a port.

& Note:

l Now, only hybrid ports support this command.

l Before applying a protocol VLAN to a port, you must assign the port to the VLAN.

Related commands: display protocol-vlan interface.

Examples

# Apply protocols numbered 4 through 7 in VLAN 3 to Ethernet 1/1/1.

<H3C> system-view

[H3C] interface ethernet 1/1/1

[H3C-Ethernet1/1/1] port hybrid protocol-vlan vlan 3 4 to 7

1.3.4 protocol-vlan

Syntax

protocol-vlan [ protocol-index ] { at | ip | ipx { ethernetii | llc | raw | snap } | mode { ethernetii [ etype etype-id ] | llc [ dsap dsap-id ] [ ssap ssap-id ] | snap [ etype etype-id ] } }

undo protocol-vlan { protocol-index [ to protocol-end ] | all }

View

VLAN view

Parameters

protocol-index: Start protocol index. It must be less than the value specified by protocol-end.

protocol-end: End protocol index.

at: AppleTalk protocol-based VLAN. The encapsulation formats include EthernetII and SNAP, and the Ethernet type is 0x809B.

ip: IP protocol-based VLAN. The encapsulation formats includes EthernetII and SNAP, and the Ethernet type is 0x0800.

ipx: IPX protocol-based VLAN. There are four types: EthernetII, LLC, SNAP and RAW.

ethernetii: Specifies to match the Ethernet II encapsulation format. The Ethernet type is 0x8137.

llc: Specifies to match the LLC encapsulation format. DSAP = SSAP = 0xE0.

snap: Specifies to match the SNAP encapsulation format. The Ethernet type is 0x8137.

raw: Specifies to Novell LLC encapsulated IPX packets. DSAP = SSAP = 0xFF.

mode: VLAN based on other protocols. The following protocol modes are supported.

Table 1-3 protocol modes

Protocol mode	Parameter	Description
VLAN based on EthernetII protocol	ethernetii etype etype-id	etype-id: Ethernet type of inbound packets, in the range 600 to FFFF.
LLC-based VLAN	llc dsap dsap-id ssap ssap-id	dsap-id: dsap-id: Destination service access point, in the range 0 to FF. ssap-id: Source service access point, in the range 0 to FF.
SNAP-based VLAN	snap etype etype-id	etype-id: Ethernet type of inbound packets, in the range 600 to FFFF.

all: Specifies all protocols.

Description

Use the protocol-vlan command to configure a protocol-based VLAN.

Use the undo protocol-vlan command to remove the configured protocol-based VLAN.

Related commands: display protocol-vlan vlan.

Examples

# Configure AppleTalk-based VLAN 5.

<H3C> system-view

[H3C] vlan 5

[H3C-vlan5] protocol-vlan at

1.4 IP Subnet-Based VLAN Configuration Commands

1.4.1 display ip-subnet-vlan interface

Syntax

display ip-subnet-vlan interface { interface-list | all }

View

Any view

Parameters

interface-list: Specifies the port(s) whose IP subnet-based VLAN information is to be displayed. You can specify a port in the list in the form of interface-type interface-number where interface-type is the port type and interface-number is the port number. Alternatively, you can specify a port range in the form of interface-type interface-number to interface-type interface-number where the end port must be greater than the start port.

all: Displays the information of the IP subnet-based VLANs on all the ports.

Description

Use the display ip-subnet-vlan interface command to display the IP subnet-based VLAN information of the specified or all ports.

Examples

# Display the information of the IP subnet-based VLANs configured on all the ports.

<H3C> display ip-subnet-vlan interface all

Interface: GigabitEthernet2/1/1

Vlan-ID Index Type Value

11 0 IPv4 2.2.7.0 255.255.255.0

11 1 IPv4 2.2.8.0 255.255.255.0

11 2 IPv4 2.2.9.0 255.255.255.0

11 3 IPv4 2.2.10.0 255.255.255.0

11 4 IPv4 2.2.3.0 255.255.255.0

11 5 IPv4 2.2.4.0 255.255.255.0

11 6 IPv4 2.2.5.0 255.255.255.0

11 7 IPv4 2.2.6.0 255.255.255.0

Interface: Ethernet6/1/1

Vlan-ID Index Type Value

10 0 IPv4 1.2.3.0 255.255.255.0

10 1 IPv4 1.2.4.0 255.255.255.0

10 2 IPv4 1.2.5.0 255.255.255.0

10 3 IPv4 1.2.6.0 255.255.255.0

10 4 IPv4 1.2.7.0 255.255.255.0

10 5 IPv4 1.2.8.0 255.255.255.0

10 6 IPv4 1.2.9.0 255.255.255.0

10 7 IPv4 1.2.10.0 255.255.255.0

1.4.2 display ip-subnet-vlan vlan

Syntax

display ip-subnet-vlan vlan { vlan-list | all }

View

Any view

Parameter

vlan-list: Specifies an IP subnet-based VLAN by its VLAN ID or a range of IP subnet-based VLANs in the form of vlan-id to vlan-id, where the end VLAN ID must be greater than the start VLAN ID.

all: Specifies all IP subnet-based VLANs.

Description

Use the display ip-subnet-vlan vlan command to display the IP subnets and their indexes in the specified or all VLANs.

When configuring an IP subnet-based VLAN, you can perform the command to make IP subnet add/removal decisions for the VLAN.

Example

# Display the IP subnet information of VLAN 10 and VLAN 11.

<H3C> display ip-subnet-vlan vlan 10 to 11

VLAN ID: 10

VLAN Type: IP-based VLAN

Index Type Value

0 IPv4 1.2.3.0 255.255.255.0

1 IPv4 1.2.4.0 255.255.255.0

2 IPv4 1.2.5.0 255.255.255.0

3 IPv4 1.2.6.0 255.255.255.0

4 IPv4 1.2.7.0 255.255.255.0

5 IPv4 1.2.8.0 255.255.255.0

6 IPv4 1.2.9.0 255.255.255.0

7 IPv4 1.2.10.0 255.255.255.0

VLAN ID: 11

VLAN Type: IP-based VLAN

Index Type Value

0 IPv4 2.2.7.0 255.255.255.0

1 IPv4 2.2.8.0 255.255.255.0

2 IPv4 2.2.9.0 255.255.255.0

3 IPv4 2.2.10.0 255.255.255.0

4 IPv4 2.2.3.0 255.255.255.0

5 IPv4 2.2.4.0 255.255.255.0

6 IPv4 2.2.5.0 255.255.255.0

7 IPv4 2.2.6.0 255.255.255.0

1.4.3 ip-subnet-vlan

Syntax

ip-subnet-vlan [ index ] ip ip-address { net-mask | net-mask-length }

undo ip-subnet-vlan { index-begin [ to index-end ] | all }

View

VLAN view

Parameters

index: Index of an IP subnet.

ip-address: IP address.

net-mask: IP address mask. If no mask is specified, the default mask is 255.255.255.0.

net-mask-length: Length of an IP address mask.

index-begin: Start IP subnet index. It must be less than index-end.

index-end: End IP subnet index.

Description

Use the ip-subnet-vlan command to assign an IP subnet to the current VLAN.

Use the undo ip-subnet-vlan command to remove the specified or all IP subnets from the VLAN.

Related commands: display ip-subnet-vlan vlan.

Examples

# Assign IP subnet 192.168.1.0/24 to VLAN 5.

[H3C-vlan5] ip-subnet-vlan ip 192.168.1.0 24

1.4.4 port hybrid ip-subnet-vlan vlan

Syntax

port hybrid ip-subnet-vlan vlan vlan-id

undo port hybrid ip-subnet-vlan vlan vlan-id

View

Ethernet port view

Parameters

vlan-id: Specifies the ID of an IP subnet-based VLAN to be applied/removed.

Description

Use the port hybrid ip-subnet-vlan vlan command to apply an IP subnet-based VLAN to a specified port.

Use the undo port hybrid ip-subnet-vlan vlan command to remove the IP subnet-based VLAN.

Related commands: display ip-subnet-vlan interface.

Examples

# Apply IP subnet-based VLAN 2 to Ethernet 1/1/1.

[H3C-Ethernet1/1/1] port hybrid ip-subnet-vlan vlan 2

Chapter 2 Super VLAN Configuration Commands

2.1 Super VLAN Configuration Commands

2.1.1 display supervlan

Syntax

display supervlan [ supervlan-id ]

View

Any view

Parameters

supervlan-id: VLAN ID of a configured super VLAN. This argument ranges from 1 to 4094.

Description

Use the display supervlan command to display mapping relationship between a specified super VLAN and sub VLANs, and the ports that identify the mapping relationship.

Related commands: supervlan, subvlan.

Examples

# Display the mapping relationship between the super VLAN and the sub VLAN.

<H3C> display supervlan 2

Supervlan ID : 2

ARP proxy: enable

Subvlan ID : 3-5

Subvlan in which arp proxy is disabled: None

# Display detailed information about the super VLAN and the sub VLANs displayed above.

<H3C> display vlan 2

VLAN ID: 2

VLAN Type: static

It is a Super VLAN.

Route Interface: configured

IP Address: 10.153.1.41

Subnet Mask: 255.255.255.0

Description: VLAN 0002

Name: VLAN 0002

Tagged Ports: none

Untagged Ports: none

<H3C> display vlan 3

VLAN ID: 3

VLAN Type: static

It is a Sub VLAN. And the Super VLAN is VLAN 2

ARP proxy enabled.

Route Interface: not configured

Description: VLAN 0003

Name: VLAN 0003

Tagged Ports: none

Untagged Ports:

Ethernet5/1/1

<H3C> display vlan 4

VLAN ID: 4

VLAN Type: static

It is a Sub VLAN. And the Super VLAN is VLAN 2

ARP proxy enabled.

Route Interface: not configured

Description: VLAN 0004

Name: VLAN 0004

Tagged Ports: none

Untagged Ports:

Ethernet5/1/2

<H3C> display vlan 5

VLAN ID: 5

VLAN Type: static

It is a Sub VLAN. And the Super VLAN is VLAN 2

ARP proxy enabled.

Route Interface: not configured

Description: VLAN 0005

Name: VLAN 0005

Tagged Ports: none

Untagged Ports:

Ethernet5/1/3

2.1.2 subvlan

Syntax

subvlan sub-vlan-list

undo subvlan [sub-vlan-list ]

View

VLAN view of super VLAN

Parameters

sub-vlan-list: List of sub VLANs. It is expressed in the form of sub-vlan-list = { vlan-id [ to vlan-id }&<1-10>. The vlan-id after the keyword to must be greater than or equal to that before to. &<1-10> means that you can specify up to 10 sub VLANs or sub VLAN lists.

Description

Use the subvlan command to associate a specified super VLAN with the specified sub VLAN(s).

Use the undo subvlan command to cancel the association.

& Note:

l The VLANs configured to be the sub VLANs of a super VLAN must be existing VLANs.

l You can still assign/remove ports to/from a sub VLAN associated with a super VLAN.

l If you do not specify the sub-vlan-list argument, the undo subvlan command cancels all mapping relationships between the specified super VLAN and all sub VLANs. Otherwise, this command cancels the mapping relationship between the specified sub VLAN(s) and the specified super VLAN.

Related commands: display supervlan.

Examples

# Associate super VLAN 10 with sub VLANs 3, 4, 5 and 9.

[H3C-vlan10] subvlan 3 to 5 9

2.1.3 supervlan

Syntax

supervlan

undo supervlan

View

VLAN view

Parameters

None

Description

Use the supervlan command to configure a VLAN as a super VLAN.

Use the undo supervlan command to cancel the configuration.

By default, no type is configured for a VLAN.

& Note:

l You cannot assign ports to a super VLAN.

l When a VLAN is configured as a super VLAN, ARP proxy is enabled automatically on the corresponding VLAN interface and cannot be disabled.

l The default VLANs cannot be configured as super VLANs.

Related commands: display supervlan.

Examples

# Configure VLAN 2 as a super VLAN.

[H3C-vlan2] supervlan

Chapter 3 Isolate-User-VLAN Configuration Commands

3.1 Isolate-User-VLAN Configuration Commands

3.1.1 display isolate-user-vlan

Syntax

display isolate-user-vlan [ isolate-user-vlan-num ]

View

Any view

Parameters

isolate-user-vlan-num: VLAN ID of an isolate-user-VLAN.

Description

Use the display isolate-user-vlan command to display the specified or all isolate-user-VLANs and their associated secondary VLANs as well as the information of these VLANs.

Related commands: isolate-user-vlan enable.

Examples

# Display the mapping relationships between all the isolate-user-VLANs and their secondary VLANs.

<H3C> display isolate-user-vlan

Isolate-user-VLAN VLAN ID : 5

Secondary VLAN ID : 3-4

VLAN ID: 5

VLAN Type: static

Isolate-user-VLAN type : isolate-user-VLAN

Route Interface: not configured

Description: VLAN 0005

Name: VLAN 0005

Tagged Ports: none

Untagged Ports:

Ethernet2/1/3 Ethernet2/1/4

VLAN ID: 3

VLAN Type: static

Isolate-user-VLAN type : secondary

Route Interface: not configured

Description: VLAN 0003

Name: VLAN 0003

Tagged Ports: none

Untagged Ports:

Ethernet2/1/3

VLAN ID: 4

VLAN Type: static

Isolate-user-VLAN type : secondary

Route Interface: not configured

Description: VLAN 0004

Name: VLAN 0004

Tagged Ports: none

Untagged Ports:

Ethernet2/1/4

Table 3-1 Description on the fields of the display isolate-user-vlan command

Field	Description
Isolate-user-VLAN Vlan ID	VLAN ID of Isolate-user-VLAN
Secondary Vlan ID	VLAN ID of Secondary VLAN
Vlan ID	VLAN ID
Vlan Type	VLAN configuration type (static or dynamic configuration)
Isolate-user-VLAN type	VLAN type is Isolate-user-VLAN or Secondary VLAN.
Route Interface	Whether VLAN has route function
Description	VLAN description
Name	VLAN name
Tagged Ports	Ports through which packets of this VLAN are sent with VLAN tag kept
Untagged Ports	Ports through which packets of this VLAN are sent with VLAN tag stripped off

3.1.2 isolate-user-vlan

Syntax

isolate-user-vlan isolate-user-vlan-num secondary secondary-vlan-numlist

undo isolate-user-vlan isolate-user-vlan-num [ secondary secondary-vlan-numlist ]

View

System view

Parameters

isolate-user-vlan-num: VLAN ID of an isolate-user-VLAN.

secondary-vlan-numlist: List of secondary VLANs. You can specify individual VLANs and VLAN ranges in the list, but the total number of them cannot exceed 10. Specify an individual secondary VLAN by its ID. Specify a secondary-VLAN range in the form of secondary-vlan-num to secondary-vlan-num where the secondary-vlan-num argument takes on a VLAN ID and the end VLAN must be greater than the start VLAN.

Description

Use the isolate-user-vlan command to associate an isolate-user-VLAN with the specified secondary VLAN(s).

Use the undo isolate-user-vlan command to remove the association(s).

By default, no secondary VLAN is associated with an isolate-user-VLAN.

The VLANs specified in the isolate-user-vlan command may have contained hybrid ports, access ports, or no ports. For the access ports or the hybrid ports with the isolate-user-VLAN as the PVID and assigned to the isolate-user-VLAN in untagged mode, the command assigns them to all the secondary VLANs. At the same time, the command assigns the ports in all secondary VLANs to the isolate-user-VLAN.

The undo isolate-user-vlan command removes the ports of the isolate-user-VLAN from secondary VLANs and removes the ports of secondary VLANs from the isolate-user-VLAN.

& Note:

l An isolate-user-VLAN can be associated with up to 64 secondary VLANs.

l Up to 1024 secondary VLANs can be created.

l Secondary VLANs associated with the same isolate-user-VLAN cannot be configured with the same MAC address.

Related commands: display isolate-user-vlan.

Examples

# Associate isolate-user-VLAN 10 with secondary VLANs 2, 3, 4, 5, and 9.

[H3C] isolate-user-vlan 10 secondary 2 to 5 9

3.1.3 isolate-user-vlan enable

Syntax

isolate-user-vlan enable

undo isolate-user-vlan enable

View

VLAN view

Parameters

None

Description

Use the isolate-user-vlan enable command to configure a VLAN as an isolate-user-VLAN.

Use the undo isolate-user-vlan enable command to cancel the configuration.

An isolate-user-VLAN is allowed to contain multiple ports, including upstream ports connecting to other switches. However, the VLAN can only contain access or hybrid ports, not trunk ports.

Related commands: display isolate-user-vlan.

& Note:

l You cannot configure VLAN 1 as an isolate-user-VLAN or secondary VLAN.

l You can configure up to 32 isolate-user-VLANs for the system.

l You cannot configure an isolate-user-VLAN/secondary VLAN as any other type of VLAN, such as multicast VLAN, Super VLAN/Sub VLAN, Guest VLAN or VLAN running L2VPN.

l You cannot assign a trunk port to an isolate-user-VLAN/secondary VLAN.

Examples

# Configure VLAN 5 as an isolate-user-VLAN.

[H3C-vlan5] isolate-user-vlan enable

H3C S9500 Command Manual-Release1648[v1.24]-01 IP Access Volume

1.1.5 name

1.4 IP Subnet-Based VLAN Configuration Commands

1.4.1 display ip-subnet-vlan interface

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

News & Events

Contact Us