text: Description of a VLAN or VLAN interface. Currently, the device supports the following types of characters or symbols: standard English characters (numbers and case-sensitive letters), special English characters, spaces, and other characters or symbols that conform to the Unicode standard.

l For a VLAN, the description string contains 1 to 32 characters.

l For a VLAN interface, the description string contains 1 to 80 characters.

Description

Use the description command to configure the description of the current VLAN or VLAN interface.

Use the undo description command to restore the default.

For a VLAN, the default description is the VLAN ID, for example, VLAN 0001; for a VLAN interface, the default description is the name of the interface, for example, Vlan-interface 1 Interface.

You can configure a description to describe the function or connection of a VLAN or VLAN interface for management sake.

Examples

# Configure the description of VLAN 1 as RESEARCH.

<Sysname> system-view

[Sysname] vlan 1

[Sysname-vlan1] description RESEARCH

# Configure the description of VLAN-interface 2 as VLAN-INTERFACE-2.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] quit

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] description VLAN-INTERFACE-2

display interface vlan-interface

Syntax

display interface vlan-interface [ vlan-interface-id ]

View

Any view

Default Level

1: Monitor level

Parameters

vlan-interface-id: VLAN interface number.

Description

Use the display interface vlan-interface command to display information about a specified or all VLAN interfaces if no interface is specified.

Related commands: interface vlan-interface.

Examples

# Display the information of VLAN-interface 2.

<Sysname> display interface vlan-interface 2

Vlan-interface2 current state: UP

Line protocol current state: UP

Description: Vlan-interface2 Interface

The Maximum Transmit Unit is 1500

Internet Address is 192.168.0.72/24 Primary

IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 0000-fc00-6505

IPv6 Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 0000-fc00-6505

Table 1-1 display interface vlan-interface command output description

Field	Description
Vlan-interface2 current state	The physical state of the VLAN interface, which can be one of the following: l Administratively DOWN: The administrative state of the VLAN interface is down because it has been manually shut down with the shutdown command. l DOWN: The administrative state of this VLAN interface is up, but its physical state is down. It indicates that the VLAN corresponding to this interface does not contain any port in the UP state (possibly because the ports are not well connected or the lines have failed). l UP: both the administrative state and the physical state of this VLAN interface are up.
Line protocol current state	The link layer protocol state of a VLAN interface, which can be one of the following: l DOWN: The protocol state of this VLAN interface is down, usually because no IP address is configured. l UP: The protocol state of this VLAN interface is up.
Description	The description string of a VLAN interface
The Maximum Transmit Unit	The MTU of a VLAN interface
Internet protocol processing :	IP packets processing ability. Disabled indicates that the interface is not configured with an IP address.
IP Packet Frame Type	IPv4 outgoing frame format
Hardware address	MAC address corresponding to a VLAN interface
IPv6 Packet Frame Type	IPv6 outgoing frame format

display vlan

Syntax

display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic | reserved | static ]

View

Any view

Default Level

1: Monitor level

Parameters

vlan-id1: Displays the information of a VLAN specified by VLAN ID in the range of 1 to 4094.

vlan-id1 to vlan-id2: Displays the information of a range of VLANs specified by a VLAN ID range.

all: Displays all current VLAN information except for the reserved VLANs.

dynamic: Displays the number of dynamic VLANs and the ID of each dynamic VLAN. Dynamic VLANs refer to VLANs that are generated through GVRP or those distributed by a RADIUS server.

reserved: Displays information of the reserved VLANs. Protocol modules determine reserved VLANs according to function implementation, and reserved VLANs serve protocol modules. You cannot do any operation on reserved VLANs.

static: Displays the number of static VLANs and the ID of each static VLAN. Static VLANs refer to VLANs manually created.

Description

Use the display vlan command to display VLAN information.

Related commands: vlan.

Examples

# Display VLAN 2 information.

<Sysname> display vlan 2

VLAN ID: 2

VLAN Type: static

Route interface: not configured

Description: VLAN 0002

Tagged Ports: none

Untagged Ports:

GigabitEthernet2/0/1 GigabitEthernet2/0/3 GigabitEthernet2/0/4

# Display VLAN 3 information.

<Sysname> display vlan 3

VLAN ID: 3

VLAN Type: static

Route Interface: configured

IP Address: 1.1.1.1

Subnet Mask: 255.255.255.0

Description: VLAN 0003

Tagged Ports: none

Untagged Ports: none

Table 1-2 display vlan command output description

Field	Description
VLAN ID	VLAN ID
VLAN Type	VLAN type (static or dynamic)
Route interface	Whether the VLAN interface is configured for the VLAN: not configured or configured
Description	VLAN description
IP Address	Primary IP address of the VLAN interface (available only on a VLAN interface configured with an IP address). You can use the display interface vlan-interface command in any view or the display this command in VLAN interface view to display its secondary IP address(es), if any.
Subnet Mask	Subnet mask of the primary IP address (available only on a VLAN interface configured with an IP address)
Tagged Ports	Ports through which packets of the VLAN are sent tagged
Untagged Ports	Ports through which packets of the VLAN are sent untagged

interface vlan-interface

Syntax

interface vlan-interface vlan-interface-id

undo interface vlan-interface vlan-interface-id

View

System view

Default Level

2: System level

Parameters

vlan-interface-id: VLAN interface number, in the range of 1 to 4094.

Description

Use the interface vlan-interface command to create a VLAN interface and enter its view or enter the view of an existing VLAN interface.

Before you can create the VLAN interface of a VLAN, create the VLAN first.

Use the undo interface vlan-interface command to remove the specified VLAN interface.

You can use the ip address command in VLAN interface view to configure an IP address for a VLAN interface to perform IP routing.

Related commands: display interface Vlan-interface.

Examples

# Create VLAN-interface 2.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] quit

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2]

ip address

Syntax

ip address ip-address { mask | mask-length } [ sub ]

undo ip address [ ip-address { mask | mask-length } [ sub ] ]

View

VLAN interface view

Default Level

2: System level

Parameters

ip-address: IP address to be assigned to the current VLAN interface, in dotted decimal format.

mask: Subnet mask in dotted decimal notation.

mask-length: Subnet mask length, the number of consecutive ones in the mask. The value range is 0 to 32.

sub: Indicates the address is a secondary IP address.

Description

Use the ip address command to assign an IP address and subnet mask to a VLAN interface.

Use the undo ip address command to remove the IP address and subnet mask for a VLAN interface.

By default, no IP address is assigned to any VLAN interface.

When a VLAN connects to one subnet, you need to assign only one IP address for its VLAN interface. When the VLAN connects to multiple subnets, you need to assign multiple IP addresses for the VLAN interface. On an S7500E series Ethernet switch, you can assign up to five IP addresses to a VLAN interface.Among these IP addresses, one is primary and the others are secondary.

When configuring IP addresses for a VLAN interface, consider the following:

l You can assign only one primary IP address to an interface.

l Before removing the primary IP address, remove all secondary IP addresses.

l To remove all IP addresses, use the undo ip address command without any parameter.

l To remove the primary IP address, use the undo ip address ip-address { mask | mask-length } command.

l To remove a secondary IP address, use the undo ip address ip-address { mask | mask-length } sub command.

Related commands: display ip interface (IP Address Commands in the IP Services Volume).

Examples

# Specify the IP address as 1.1.0.1, the subnet mask as 255.255.255.0 for VLAN-interface 1.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] ip address 1.1.0.1 255.255.255.0

shutdown

Syntax

shutdown

undo shutdown

View

VLAN interface view

Default Level

2: System level

Parameters

None

Description

Use the shutdown command to shut down a VLAN interface.

Use the undo shutdown command to bring up a VLAN interface.

By default, a VLAN interface is up except when all ports in the VLAN are down.

You can use the undo shutdown command to bring up a VLAN interface after configuring related parameters and protocols for the VLAN interface. When a VLAN interface fails, you can shut down the interface with the shutdown command and then bring it up with the undo shutdown command. In this way, the interface may resume.

The state of any Ethernet port in a VLAN is independent of the VLAN interface state.

Examples

# Shut down VLAN interface 2 and then bring it up.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] shutdown

[Sysname-Vlan-interface2] undo shutdown

vlan

Syntax

vlan { vlan-id1 [ to vlan-id2 ] | all }

undo vlan { vlan-id1 [ to vlan-id2 ] | all }

View

System view

Default Level

2: System level

Parameters

vlan-id1, vlan-id2: VLAN ID, in the range 1 to 4094.

vlan-id1 to vlan-id2: Specifies a VLAN range. A VLAN ID is in the range 1 to 4094.

all: Creates or removes all VLANs except reserved VLANs.

Description

Use the vlan vlan-id command to create a VLAN and enter its view or enter the view of an existing VLAN.

Use the vlan vlan-id1 to vlan-id2 command to create a range of VLANs specified by vlan-id1 to vlan-id2, except reserved VLANs.

Use the undo vlan command to remove the specified VLAN(s).

l As the default VLAN, VLAN 1 cannot be created or removed.

l You cannot create/remove reserved VLANs reserved for specific functions.

l You cannot use the undo vlan command to directly remove reserved VLANs, voice VLANs, management VLANs, dynamic VLANs, VLANs configured with QoS policies, control VLANs configured for smart link, or remote probe VLANs configured for port mirroring. To remove these VLANs, you need to first remove related configurations.

l If an isolate-user-VLAN and a secondary VLAN are associated with each other with the isolate-user-vlan command, the isolate-user-VLAN or secondary VLAN cannot be removed unless the association is removed first.

Related commands: display vlan.

Examples

# Enter VLAN 2 view.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2]

# Create VLAN 4 through VLAN 100.

<Sysname> system-view

[Sysname] vlan 4 to 100

Please wait............. Done.

Port-Based VLAN Configuration Commands

display port

Syntax

display port { hybrid | trunk }

View

Any view

Default Level

1: Monitor level

Parameters

hybrid: Displays hybrid ports.

trunk: Displays trunk ports.

Description

Use the display port command to display information about the hybrid or trunk ports on the device, including the port names, default VLAN IDs, and allowed VLAN IDs.

Examples

# Display information about the hybrid ports in the system.

<Sysname> display port hybrid

Interface PVID VLAN passing

GE2/0/2 100 Tagged: 1000, 1002, 1500, 1600-1611, 2000,

2555-2558, 3000, 4000

Untagged:1, 10, 15, 18, 20-30, 44, 55, 67, 100,

150-160, 200, 255, 286, 300-302

# Display information about the trunk ports in the system.

<Sysname> display port trunk

Interface PVID VLAN passing

GE2/0/1 2 1-4, 6-100, 145, 177, 189-200, 244, 289, 400,

555, 600-611, 1000, 2006-2008

Table 1-3 display port command output description

Field	Description
Interface	Port name
PVID	Default VLAN ID of the port
VLAN passing	VLANs whose packets are allowed to pass through the port.
Tagged	VLANs whose packets are required to pass through the port tagged.
Untagged	VLANs whose packets are required to pass through the port untagged.

port

Syntax

port interface-list

undo port interface-list

View

VLAN view

Default Level

2: System level

Parameters

interface interface-list: Specifies an Ethernet port list or Layer-2 aggregate interface list, in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 ports or port ranges.

Description

Use the port command to assign the specified access port(s) to the current VLAN.

Use the undo port command to remove the specified access port(s) from the current VLAN.

By default, all ports are in VLAN 1.

Note that:

l This command is only applicable on access ports.

l All ports are access ports by default. However, you can manually configure the port type. For more information, refer to port link-type.

l If you use this command to assign a Layer-2 aggregate interface to a VLAN, this command assigns the Layer-2 aggregate interface but not its member ports to the current VLAN. For detailed information about Layer-2 aggregate interfaces, refer to Link Aggregation Configuration in the Access Volume.

Related commands: display vlan.

Examples

# Assign GigabitEthernet 2/0/1 through GigabitEthernet 2/0/3 to VLAN 2.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] port GigabitEthernet 2/0/1 to GigabitEthernet 2/0/3

# Assign Layer-2 aggregate interface Bridge-aggregation 1 to VLAN 2.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] port bridge-aggregation 1

port access vlan

Syntax

port access vlan vlan-id

undo port access vlan

View

Ethernet interface view, port group view, Layer-2 aggregate interface view,

Default Level

2: System level

Parameters

vlan-id: VLAN ID, in the range of 1 to 4094. Be sure that the VLAN specified by the VLAN ID already exists.

Description

Use the port access vlan command to assign the current access port(s) to the specified VLAN.

Use the undo port access vlan command to restore the default.

By default, all access ports belong to VLAN 1.

You can assign an access port to only one VLAN. When doing that, note the following:

l In Ethernet interface view, this command only applies to the current port.

l In port group view, this command applies to all ports in the port group. For information about port groups, refer to Ethernet Interface Configuration in the Access Volume.

l In Layer-2 aggregate interface view, this command applies to the Layer-2 aggregate interface and all its member ports. After you perform the configuration, the system starts applying the configuration to the aggregate interface and its aggregation member ports. If the system fails to do that on the aggregate interface, it stops applying the configuration to the aggregation member ports. If it fails to do that on an aggregation member port, it simply skips the port and moves to the next port. For information about Layer-2 aggregate interfaces, refer to Link Aggregation Configuration in the Access Volume.

Examples

# Assign GigabitEthernet 2/0/1 to VLAN 3.

<Sysname> system-view

[Sysname] vlan 3

[Sysname-vlan3] quit

[Sysname] interface GigabitEthernet 2/0/1

[Sysname-GigabitEthernet2/0/1] port access vlan 3

# Assign Layer-2 aggregate interface Bridge-aggregation 1 and its member ports to VLAN 3.

<Sysname> system-view

[Sysname] vlan 3

[Sysname-vlan3] quit

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port access vlan 3

port hybrid pvid vlan

Syntax

port hybrid pvid vlan vlan-id

undo port hybrid pvid

View

Ethernet interface view, port group view, Layer-2 aggregate interface view

Default Level

2: System level

Parameters

vlan-id: VLAN ID, in the range of 1 to 4094.

Description

Use the port hybrid pvid vlan command to configure the default VLAN ID of the hybrid port.

Use the undo port hybrid pvid command to restore the default.

By default, the default VLAN of a hybrid port is VLAN 1.

You can use a nonexistent VLAN as the default VLAN for a hybrid port. Removing the default VLAN of a hybrid port with the undo vlan command does not affect the setting of the default VLAN on the port.

l In Ethernet interface view, this command only applies to the current port.

l In port group view, this command applies to all ports in the port group. For information about port groups, refer to Ethernet Interface Configuration in the Access Volume.

l The local and remote hybrid ports must use the same default VLAN ID for the traffic of the default VLAN to be transmitted properly.

l After configuring the default VLAN for a hybrid port, you must use the port trunk permit vlan command to configure the hybrid port to allow packets from the default VLAN to pass through, so that the port can forward packets from the default VLAN.

Related commands: port link-type, port hybrid vlan.

Examples

# Configure VLAN 100 as the default VLAN of the hybrid port GigabitEthernet 2/0/1.

<Sysname> system-view

[Sysname] vlan 100

[Sysname-vlan100] quit

[Sysname] interface GigabitEthernet 2/0/1

[Sysname-GigabitEthernet2/0/1] port link-type hybrid

[Sysname-GigabitEthernet2/0/1] port hybrid pvid vlan 100

# Configure VLAN 100 as the default VLAN of the hybrid Layer-2 aggregate interface Bridge-aggregation 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port hybrid pvid vlan 100

port hybrid vlan

Syntax

port hybrid vlan vlan-id-list { tagged | untagged }

undo port hybrid vlan vlan-id-list

View

Ethernet interface view, port group view, Layer-2 aggregate interface view

Default Level

2: System level

Parameters

vlan-id-list: VLANs that the hybrid ports will be assigned to. This argument is expressed in the format of [ vlan-id1 [ to vlan-id2 ] ]&<1-10>, where vlan-id ranges from 1 to 4094 and &<1-10> indicates that you can specify up to 10 VLAN IDs or VLAN ID ranges. Be sure that the specified VLANs already exist.

tagged: Configures the port(s) to send the packets of the specified VLAN(s) with the tags kept.

untagged: Configures the port to send the packets of the specified VLAN(s) with the tags removed.

Description

Use the port hybrid vlan command to assign the current hybrid port(s) to the specified VLAN(s).

Use the undo port hybrid vlan command to remove the current hybrid port(s) from the specified VLAN(s).

By default, a hybrid port only allows packets from VLAN 1 to pass through untagged.

A hybrid port can carry multiple VLANs. If you execute the port hybrid vlan command multiple times, the VLANs the hybrid port carries are the set of VLANs specified by vlan-id-list in each execution.

l In Ethernet interface view, this command only applies to the current port.

l In port group view, this command applies to all ports in the port group. For information about port groups, refer to Ethernet Interface Configuration in the Access Volume.

Related commands: port link-type.

Examples

# Assign the hybrid port GigabitEthernet 2/0/1 to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100, and configure GigabitEthernet 2/0/1 to send packets of these VLANs with tags kept.

<Sysname> system-view

[Sysname] interface GigabitEthernet 2/0/1

[Sysname-GigabitEthernet2/0/1] port link-type hybrid

[Sysname-GigabitEthernet2/0/1] port hybrid vlan 2 4 50 to 100 tagged

# Assign hybrid ports in port group 2 to VLAN 2, and configure these hybrid ports to send packets of VLAN 2 with VLAN tags removed.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] quit

[Sysname] port-group manual 2

[Sysname-port-group-manual-2] group-member GigabitEthernet 2/0/1 to GigabitEthernet 2/0/6

[Sysname-port-group-manual-2] port link-type hybrid

[Sysname-port-group-manual-2] port hybrid vlan 2 untagged

Configuring GigabitEthernet2/0/1... Done.

Configuring GigabitEthernet2/0/2... Done.

Configuring GigabitEthernet2/0/3... Done.

Configuring GigabitEthernet2/0/4... Done.

Configuring GigabitEthernet2/0/5... Done.

Configuring GigabitEthernet2/0/6... Done.

# Assign the hybrid Layer-2 aggregate interface Bridge-aggregation 1 and its member ports to VLAN 2, and configure them to send packets of VLAN 2 with tags removed.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port link-type hybrid

[Sysname-Bridge-Aggregation1] port hybrid vlan 2 untagged

Please wait... Done.

Configuring GigabitEthernet2/0/1... Done.

Configuring GigabitEthernet2/0/2... Done.

Note that GigabitEthernet 2/0/1 and GigabitEthernet 2/0/2 are the member ports of the aggregation group corresponding to Bridge-aggregation 1.

port link-type

Syntax

port link-type { access | hybrid | trunk }

undo port link-type

View

Ethernet interface view, port group view, Layer-2 aggregate interface view

Default Level

2: System level

Parameters

access: Configures the link type of a port as access.

hybrid: Configures the link type of a port as hybrid.

trunk: Configures the link type of a port as trunk.

Description

Use the port link-type command to configure the link type of a port.

Use the undo port link-type command to restore the default link type of a port.

By default, any port is an access port.

l In Ethernet interface view, this command only applies to the current port.

l In port group view, this command applies to all ports in the port group. For information about port groups, refer to Ethernet Interface Configuration in the Access Volume.

To change the link type of a port from trunk to hybrid or vice versa, you must set the link type to access first.

Examples

# Configure GigabitEthernet 2/0/1 as a trunk port.

<Sysname> system-view

[Sysname] interface GigabitEthernet 2/0/1

[Sysname-GigabitEthernet2/0/1] port link-type trunk

# Configure all the ports in the manual port group group1 as hybrid ports.

<Sysname> system-view

[Sysname] port-group manual group1

[Sysname-port-group manual group1] group-member ethernet 2/0/1

[Sysname-port-group manual group1] group-member ethernet 2/0/2

[Sysname-port-group manual group1] port link-type hybrid

# Configure Layer-2 aggregate interface Bridge-aggregation 1 and its member ports as hybrid ports.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port link-type hybrid

port trunk permit vlan

Syntax

port trunk permit vlan { vlan-id-list | all }

undo port trunk permit vlan { vlan-id-list | all }

View

Ethernet interface view, port group view, Layer-2 aggregate interface view,

Default Level

2: System level

Parameters

vlan-id-list: VLANs that the trunk port(s) will be assigned to. This argument is expressed in the format of [vlan-id1 [ to vlan-id2 ] ]&<1-10>, where vlan-id ranges from 1 to 4094 and &<1-10> indicates that you can specify up to 10 VLAN IDs or VLAN ID ranges.

all: Permits all VLANs to pass through the trunk port(s). On GVRP-enabled trunk ports, you must configure the port trunk permit vlan all command to ensure that the traffic of all dynamically registered VLANs can pass through. However, When GVRP is disabled on a port, you are discouraged to configure the command on the port. This is to prevent users of unauthorized VLANs from accessing restricted resources through the port.

Description

Use the port trunk permit vlan command to assign the current trunk port(s) to the specified VLAN(s).

Use the undo port trunk permit vlan command to remove the trunk port(s) from the specified VLANs.

By default, a trunk port allows only packets from VLAN 1 to pass through.

A trunk port can carry multiple VLANs. If you execute the port trunk permit vlan command multiple times, the VLANs the trunk port carries are the set of VLANs specified by vlan-id-list in each execution.

Note that on a trunk port, only traffic of the default VLAN can pass through untagged.

l In Ethernet interface view, this command only applies to the current port.

l In port group view, this command applies to all ports in the port group. For information about port groups, refer to Ethernet Interface Configuration in the Access Volume.

Related commands: port link-type.

Examples

# Assign the trunk port GigabitEthernet 2/0/1 to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100.

<Sysname> system-view

[Sysname] interface GigabitEthernet 2/0/1

[Sysname-GigabitEthernet2/0/1] port link-type trunk

[Sysname-GigabitEthernet2/0/1] port trunk permit vlan 2 4 50 to 100

Please wait........... Done.

# Assign the trunk Layer-2 aggregate interface Bridge-aggregation 1 to VLAN 2, assuming that Bridge-aggregation 1 does not have member ports.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port trunk permit vlan 2

Please wait... Done.

# Assign the trunk Layer-2 aggregate interface Bridge-aggregation 1 to VLAN 13 and VLAN 15. Among the member ports of the aggregation group corresponding to Bridge-aggregation 1, GigabitEthernet 2/0/1 is an access port, and GigabitEthernet 2/0/2 is a trunk port.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port trunk permit vlan 13 15

Please wait... Done.

Error: Failed to configure on interface GigabitEthernet2/0/1! This port is not a Trunk port!

Configuring GigabitEthernet2/0/1... Done.

Among the output fields above, the message “Please wait... Done” indicates that the configuration on Bridge-aggregation 1 succeeded; “Error: Failed to configure on interface GigabitEthernet2/0/1! This port is not a Trunk port!” indicates that the configuration failed on GigabitEthernet 2/0/1 because GigabitEthernet 2/0/1 was not a trunk port; “Configuring Ethernet GigabitEthernet 2/0/2... Done” indicates that the configuration on GigabitEthernet 2/0/2 succeeded.

port trunk pvid vlan

Syntax

port trunk pvid vlan vlan-id

undo port trunk pvid

View

Ethernet interface view, port group view, Layer-2 aggregate interface view

Default Level

2: System level

Parameters

vlan-id: VLAN ID, in the range of 1 to 4094

Description

Use the port trunk pvid vlan command to configure the default VLAN ID for the trunk port.

Use the undo port trunk pvid command to restore the default.

By default, the default VLAN of a trunk port is VLAN 1.

You can use a nonexistent VLAN as the default VLAN for a trunk port. Removing the default VLAN of a trunk port with the undo vlan command does not affect the setting of the default VLAN on the port.

l In Ethernet interface view, this command only applies to the current port.

l In port group view, this command applies to all ports in the port group. For information about port groups, refer to Ethernet Interface Configuration in the Access Volume.

l The local and remote trunk ports must use the same default VLAN ID for the traffic of the default VLAN to be transmitted properly.

l After configuring the default VLAN for a trunk port, you must use the port trunk permit vlan command to configure the trunk port to allow packets from the default VLAN to pass through, so that the port can forward packets from the default VLAN.

Related commands: port link-type, port trunk permit vlan.

Examples

# Configure VLAN 100 as the default VLAN of the trunk port GigabitEthernet 2/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet 2/0/1

[Sysname-GigabitEthernet2/0/1] port link-type trunk

[Sysname-GigabitEthernet2/0/1] port trunk pvid vlan 100

# Configure VLAN 100 as the default VLAN of the trunk Layer-2 aggregate interface Bridge-aggregation 1, assuming Bridge-aggregation 1 does not have member ports.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port trunk pvid vlan 100

# Configure VLAN 100 as the default VLAN of the trunk Layer-2 aggregate interface Bridge-aggregation 1. Among the member ports of the aggregation group corresponding to Bridge-aggregation 1, GigabitEthernet 2/0/1 is an access port and GigabitEthernet 2/0/2 is a trunk port.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port trunk pvid vlan 100

Error: Failed to configure on interface GigabitEthernet2/0/1! This port is not a Trunk port!

The output above shows that the configuration on Bridge-aggregation 1 and the member port GigabitEthernet 2/0/2 succeeded; the configuration on GigabitEthernet 2/0/1 failed because GigabitEthernet 2/0/1 was not a trunk port.

MAC Address-Based VLAN Configuration Commands

display mac-vlan

Syntax

display mac-vlan { all | dynamic | mac-address mac-address [ mask mac-mask ] | static | vlan vlan-id }

View

Any view

Default Level

1: Monitor level

Parameters

all: Displays all the MAC address-to-VLAN entries.

dynamic: Displays dynamically configured MAC address-to-VLAN entries.

mac-address mac-address: Displays the MAC address-to-VLAN entry containing the specified MAC address.

mask mac-mask: Displays the MAC address-to-VLAN entries with their MAC addresses in the specified range.

static: Displays the statically configured MAC address-to-VLAN entries.

vlan vlan-id: Displays the MAC address-to-VLAN entries associated with the specified VLAN.

Description

Use the display mac-vlan command to display the specified MAC address-to-VLAN entries.

If mac-address mac-addr is specified while mask is not specified, only the MAC address-to-VLAN entry containing the specified MAC address is displayed.

Examples

# Display all the MAC address-to-VLAN entries.

<Sysname> display mac-vlan all

The following MAC-VLAN address exist:

S: Static D: Dynamic

MAC ADDR MASK VLAN ID PRIO STATE

-------------------------------------------------------------------

0008-0001-0000 FFFF-FF00-0000 5 3 S

0002-0001-0000 FFFF-FFFF-FFFF 5 3 S&D

Total MAC VLAN address count:2

Table 1-4 display mac-vlan command output description

Field	Description
S: Static	The character S stands for the MAC address-to-VLAN entries that are configured statically.
D: Dynamic	The character D stands for the MAC address-to-VLAN entries that are configured dynamically.
MAC ADDR	MAC address of a MAC address-to-VLAN entry
MASK	Mask of the MAC address of a MAC address-to-VLAN entry
VLAN ID	VLAN ID of a MAC address-to-VLAN entry
PRIO	802.1p priority corresponding to the MAC address of a MAC address-to-VLAN entry
STATE	The state of a MAC address-to-VLAN entry, which can be: l S, indicating that the MAC address-to-VLAN entry is configured statically. l D, indicating that the MAC address-to-VLAN entry is configured automatically through the authentication server l S&D, indicating that the MAC address-to-VLAN entry is configured both statically and dynamically

display mac-vlan interface

Syntax

display mac-vlan interface

View

Any view

Default Level

1: Monitor level

Parameters

None

Description

Use the display mac-vlan interface command to display all the ports with MAC address-based VLAN enabled.

Related commands: mac-vlan enable.

Examples

# Display all the interfaces with MAC address-based VLAN enabled.

<Sysname> display mac-vlan interface

MAC VLAN is enabled on following ports:

---------------------------------------

GigabitEthernet2/0/1 GigabitEthernet2/0/2 GigabitEthernet2/0/3

mac-vlan enable

Syntax

mac-vlan enable

undo mac-vlan enable

View

Ethernet port view

Default Level

2: System level

Parameters

None

Description

Use the mac-vlan enable command to enable MAC address-based VLAN on a port.

Use the undo mac-vlan enable command to disable MAC address-based VLAN on a port.

By default, MAC address-based VLAN is disabled on a port.

Examples

# Enable MAC address-based VLAN on GigabitEthernet 2/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 2/0/1

[Sysname–GigabitEthernet2/0/1] mac-vlan enable

mac-vlan mac-address

Syntax

mac-vlan mac-address mac-address [ mask mac-mask ] vlan vlan-id [ priority pri ]

undo mac-vlan { all | mac-address mac-address [ mask mac-mask ] | vlan vlan-id }

View

System view

Default Level

2: System level

Parameters

mac-address mac-address: Specifies a MAC address.

mask mac-mask: Specifies a mask for the MAC address in the format of H-H-H. The mac-mask argument is comprised of the high-order part (all the binary bits of which are 1s) and the low-order part (all the binary bits of which are 0s). By default, the hexadecimal digits of this argument are all Fs.

vlan vlan-id: Specifies a VLAN ID, in the range of 1 to 4094.

priority pri: Specifies the 802.1p priority value corresponding to the specified MAC address. This argument is in the range of 0 to 7.

all: Removes all the static MAC address-to-VLAN entries.

Description

Use the mac-vlan mac-address command to associate the specified VLAN and priority value with the specified MAC addresses.

Use the undo mac-vlan command to remove the association.

Two MAC address-to-VLAN entry tables exist in a device. One table contains the MAC address-to-VLAN entries configured with the mask keyword specified. A MAC address-to-VLAN entry of this type describes the relationship between a group of MAC addresses and a VLAN, and a priority value. Another table contains the MAC address-to-VLAN entries configured without the mask keyword specified. A MAC address-to-VLAN entry of this type describes the relationship between a single MAC address and a VLAN, and a priority value. The system adds/removes MAC address-to-VLAN entries to/from the two tables according to your configuration.

Examples

# Associate a single MAC address 0-1-1 with VLAN 100 and 802.1p priority 7.

<Sysname> system-view

[Sysname] mac-vlan mac-address 0-1-1 vlan 100 priority 7

# Associate the MAC addresses with the high-order six hexadecimal digits being 111122 with VLAN 100 and 802.1p priority 4.

<Sysname> system-view

[Sysname] mac-vlan mac-address 1111-2222-3333 mask ffff-ff00-0000 vlan 100 priority 4

vlan precedence

Syntax

vlan precedence { mac-vlan | ip-subnet-vlan }

undo vlan precedence

View

Ethernet port view

Default Level

2: System level

Parameters

mac-vlan: Specifies to match VLANs based on MAC addresses preferentially.

ip-subnet-vlan: Specifies to match VLANs based on IP subnet settings preferentially.

Description

Use the vlan precedence command to set the order of VLAN matching.

Use the undo vlan precedence command to restore the default.

By default, VLANs are matched based on MAC addresses preferentially.

Note that this command only applies to VLANs based on a single MAC address and IP subnet-based VLANs. If both MAC address-based VLANs and IP subnet-based VLANs are created on a port, MAC address-to-VLAN entries configured with the mask keyword specified are matched preferentially, and the left VLAN entries are matched as configured by the vlan precedence command.

Examples

# Configure to match VLANs based on MAC addresses preferentially on GigabitEthernet 2/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 2/0/1

[Sysname-GigabitEthernet2/0/1] vlan precedence mac-vlan

Protocol-Based VLAN Configuration Commands

display protocol-vlan interface

Syntax

display protocol-vlan interface { interface-type interface-number1 [ to interface-type interface-number2 ] | all }

View

Any view

Default Level

2: System level

Parameters

interface-type interface-number1: Specifies an interface by its type and number.

interface-type interface-number1 to interface-type interface-number2: Specifies an interface range.

all: Displays information about protocol-based VLANs on all ports.

Description

Use the display protocol-vlan interface command to display information about protocol-based VLANs for the specified port(s).

Examples

# Display protocol-based VLAN information on GigabitEthernet 2/0/1.

[Sysname] display protocol-vlan interface GigabitEthernet 2/0/1

Interface: GigabitEthernet2/0/1

VLAN ID Protocol Index Protocol Type

======================================================

3 0 ipv4

The sample output shows that untagged packets received on GigabitEthernet 2/0/1 will be tagged with VLAN ID 2 if they carry AppleTalk packets or with VLAN ID 3 if they carry IPv4 packets.

Table 1-5 display protocol-vlan interface command output description

Field	Description
Interface	Interface of which you want to view the information
VLAN ID	ID of the protocol-based VLAN bound with the port
Protocol Index	Protocol template index
Protocol Type	Protocol type specified by the protocol template

display protocol-vlan vlan

Syntax

display protocol-vlan vlan { vlan-id1 [ to vlan-id2 ] | all }

View

Any view

Default Level

2: System level

Parameters

vlan-id1: ID of the protocol-based VLAN for which information is to be displayed, in the range of 1 to 4094.

vlan-id1 to vlan-id2: Displays protocol-based VLAN information of a VLAN range from vlan-id1 to vlan-id2. The vlan-id2 argument specifies a protocol-based VLAN ID in the range of 1 to 4094, but you must ensure that its value is greater than or equal to that of vlan-id1.

all: Displays information about all protocol-based VLANs.

Description

Use the display protocol-vlan vlan command to display the protocols and protocol indexes configured on the specified VLAN(s).

Related commands: display vlan.

Examples

# Display the protocols and protocol indexes configured on all protocol-based-VLANs.

<Sysname> display protocol-vlan vlan all

VLAN ID:2

Protocol Index Protocol Type

======================================================

0 ipv4

3 ipx ethernetii

VLAN ID:3

Protocol Index Protocol Type

======================================================

0 ipv4

1 ipx snap

Refer to Table 1-5 for description of the output.

port hybrid protocol-vlan

Syntax

port hybrid protocol-vlan vlan vlan-id { protocol-index [ to protocol-end ] | all }

undo port hybrid protocol-vlan { vlan vlan-id { protocol-index [ to protocol-end ] | all } | all }

View

Ethernet interface view, port group view, Layer-2 aggregate interface view,

Default Level

2: System level

Parameters

vlan vlan-id: Specifies a VLAN ID, in the range 1 to 4094.

protocol-index: Protocol index, in the range 0 to 15, specified by the users or assigned by the system automatically when the protocol-based VLAN is created. You can use the display protocol-vlan vlan all command to display the protocol indexes.

to protocol-end: Specifies the end protocol index. The protocol-end argument must be greater than or equal to the beginning protocol index. The range of the protocol-end argument varies with device models.

all: Specifies all protocols bound with vlan-id.

Description

Use the port hybrid protocol-vlan vlan command to associate the hybrid port(s) with a protocol-based VLAN.

Use the undo port hybrid protocol-vlan command to remove the association.

l In Ethernet interface view, this command only applies to the current port.

l In port group view, this command applies to all ports in the port group. For information about port groups, refer to Ethernet Interface Configuration in the Access Volume.

Before issuing this command, make sure that you have made the following configurations:

l Create a VLAN and associate it with specified protocols.

l Configure the link type as hybrid.

l Configure the port to allow the protocol-based VLAN to pass through.

At present, the AppleTalk-based protocol template cannot be associated with a port on an S7500E series Ethernet switch.

Related commands: display protocol-vlan interface.

Examples

# Associate the hybrid port GigabitEthernet 2/0/1 with protocol 0 in VLAN 2.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-Vlan2] protocol-vlan ipv4

[Sysname-Vlan2] quit

[Sysname] interface GigabitEthernet 2/0/1

[Sysname-GigabitEthernet2/0/1] port link-type hybrid

[Sysname-GigabitEthernet2/0/1] port hybrid vlan 2 untagged

Please wait... Done

[Sysname-GigabitEthernet2/0/1] port hybrid protocol-vlan vlan 2 0

# Associate the hybrid Layer-2 aggregate interface Bridge-aggregation 1 with protocol 0 in VLAN 2, assuming that Bridge-aggregation 1 does not have member ports.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-Vlan2] protocol-vlan ipv4

[Sysname-Vlan2] quit

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port link-type hybrid

[Sysname-Bridge-Aggregation1] port hybrid vlan 2 untagged

Please wait... Done

[Sysname-Bridge-Aggregation1] port hybrid protocol-vlan vlan 2 0

# Associate the hybrid Layer-2 aggregate interface Bridge-aggregation 1 with protocol 0 in VLAN 2. Among the member ports of the aggregation group corresponding to Bridge-aggregation 1, Ethernet 6/0/2 is an access port and Ethernet 6/0/3 is a trunk port.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-Vlan2] protocol-vlan ipv4

[Sysname-Vlan2] quit

[Sysname] interface bridge-aggregation 1

[H3C-Bridge-Aggregation2] port link-type access

Please wait... Done.

Configuring GigabitEthernet2/0/1... Done.

Configuring GigabitEthernet2/0/1............................... Done.

[H3C-Bridge-Aggregation1] port link-type hybrid

[H3C-Bridge-Aggregation1] port hybrid vlan 2 untagged

Please wait... Done.

Configuring GigabitEthernet2/0/1... Done.

[H3C-Bridge-Aggregation1] port hybrid protocol-vlan vlan 2 0

protocol-vlan

Syntax

protocol-vlan [ protocol-index ] { at | ipv4 | ipv6 | ipx { ethernetii | llc | raw | snap } | mode { ethernetii etype etype-id | llc { dsap dsap-id [ ssap ssap-id ] | ssap ssap-id } | snap etype etype-id } }

undo protocol-vlan { protocol-index [ to protocol-end ] | all }

View

VLAN view

Default Level

2: System level

Parameters

at: Specifies the AppleTalk based VLAN.

ipv4: Specifies the IPv4 based VLAN.

ipv6: Specifies the IPv6 based VLAN.

ipx: Specifies the IPX based VLAN. The keywords ethernetii, llc, raw, and snap are encapsulation formats for IPX.

mode: Configures a user-defined protocol template for the VLAN, which could also have four encapsulation formats, namely, ethernetii, llc, raw, and snap.

ethernetii etype etype-id: Specifies to match Ethernet II encapsulation format and the corresponding protocol type values. The etype-id argument is the protocol type ID of inbound packets, in the range 0x0600 to 0xffff (excluding 0x0800, 0x809b, 0x8137, and 0x86dd).

llc: Specifies to match the llc encapsulation format.

dsap dsap-id: Specifies the destination service access point, in the range of 00 to 0xff.

ssap ssap-id: Specifies the source service access point, in the range of 00 to 0xff.

snap etype etype-id: Specifies to match SNAP encapsulation format and the corresponding protocol type values. The etype-id argument is the Ethernet type of inbound packets, in the range 0x0600 to 0xffff (excluding ipx snap under the snap encapsulation format).

protocol-index: Protocol index, which specifies the protocol template to be bound with the current VLAN, in the range 0 to 15. System will automatically assign an index if this parameter is not specified.

to protocol-end: Specifies the end protocol index, in the range 0 to 15. The protocol-end argument must be greater than or equal to the protocol-index argument.

all: Specifies to remove all the protocols bound with the current VLAN.

l Do not configure both the dsap-id and ssap-id arguments in the protocol-vlan command as 0xe0 or 0xff when configuring the user-defined template for llc encapsulation. Otherwise, the encapsulation format of the matching packets will be the same as that of the ipx llc or ipx raw packets respectively. When either of the dsap-id and ssap-id arguments is configured, the system assigns aa to the other argument.

l When you use the mode keyword to configure a user-defined protocol template, do not set etype-id in ethernetii etype etype-id to 0x0800, 0x8137, 0x809b, or 0x86dd. Otherwise, the encapsulation format of the matching packets will be the same as that of the IPv4, IPX, AppleTalk, and IPv6 packets respectively.

Description

Use the protocol-vlan command to configure the VLAN as a protocol based VLAN and configure the protocol template for the VLAN.

Use the undo protocol-vlan command to remove the configured protocol template.

By default, no VLAN is bound with any protocol template.

Related commands: display protocol-vlan vlan.

Do not configure a VLAN as both a protocol-based VLAN and a voice VLAN.

Examples

# Configure VLAN 3 as an IPv4 based VLAN.

<Sysname> system-view

[Sysname] vlan 3

[Sysname-vlan3] protocol-vlan ipv4

Because IP depends on ARP for address resolution in Ethernet, you are recommended to configure the IP and ARP templates in the same VLAN and associate them with the same port to prevent communication failure.

# Create an ARP protocol template for VLAN 3 (ARP code is 0x0806) to make VLAN 3 transmit ARP packets.

l To use Ethernet encapsulation, use the command:

[Sysname-vlan3] protocol-vlan mode ethernetii etype 0806

l To use 802.3 encapsulation, use the command:

[Sysname-vlan3] protocol-vlan mode snap etype 0806

IP Subnet-Based VLAN Configuration Commands

display ip-subnet-vlan interface

Syntax

display ip-subnet-vlan interface { interface-type interface-number1 [ to interface-type interface-number2 | all }

View

Any view

Default Level

2: System level

Parameters

interface-type interface-number1: Specifies a port by its type and number.

interface-type interface-number1 to Interface-type interface-number2: Specifies multiple ports.

all: Displays IP subnet-based VLAN information about all the ports with IP subnet-based VLAN configured.

Description

Use the display ip-subnet-vlan interface command to display IP subnet-based VLANs and IP subnet indexes on the specified port(s).

Examples

# Display IP subnet-based VLANs and IP subnet indexes on GigabitEthernet 2/0/1.

<Sysname> system-view

[Sysname]display ip-subnet-vlan interface gigabitethernet2/0/1

Interface: GigabitEthernet2/0/1

VLAN ID Subnet-Index IP ADDRESS NET MASK

=======================================================

3 0 192.168.1.0 255.255.255.0

Table 1-6 display ip-subnet-vlan interface command output description

Field	Description
Interface	Interface of which you want to view the information
VLAN ID	VLAN ID
Subnet-Index	Index of the IP subnet
IP ADDRESS	IP address of the subnet (either an IP address or a network address)
NET MASK	Mask of the IP subnet

display ip-subnet-vlan vlan

Syntax

display ip-subnet-vlan vlan { vlan-id [ to vlan-id ] | all }

View

Any view

Default Level

2: System level

Parameters

vlan-id: VLAN ID, in the range 1 to 4094.

to: Specifies a VLAN ID range. The argument after this keyword must be greater than or equal to the one before this keyword.

all: Specifies all the VLANs.

Description

Use the display ip-subnet-vlan vlan command to display the IP subnet information and IP subnet indexes on the specified VLAN(s).

Related commands: display vlan.

Examples

# Display the IP subnet information of all VLANs.

<Sysname> display ip-subnet-vlan vlan all

VLAN ID: 3

Subnet Index IP Address Subnet Mask

====================================================

0 192.168.1.0 255.255.255.0

Table 1-7 display ip-subnet-vlan vlan command output description

Field	Description
VLAN ID	VLAN ID
Subnet Index	IP subnet index
IP Address	IP address of the subnet (can be an IP address or a network address)
Subnet Mask	Mask of the IP subnet

ip-subnet-vlan

Syntax

ip-subnet-vlan [ ip-subnet-index ] ip ip-address [ mask ]

undo ip-subnet-vlan { ip-subnet-index [ to ip-subnet-end ] | all }

View

VLAN view

Default Level

2: System level

Parameters

ip-subnet-index: Beginning IP subnet Index, in the range of 0 to 11. This value can be configured by users, or automatically numbered by system based on the order in which the IP subnets or IP addresses are associated with the VLAN.

ip ip-address [mask]: Specifies the source IP address or network address based on which the subnet-based VLANs are classified, in dotted decimal notation. The mask argument is the subnet mask of the source IP address or network address, in dotted decimal notation with a default value of 255.255.255.0.

to: Specifies an IP subnet index range.

ip-subnet-end: End IP subnet index, in the range of 0 to 11. This argument must be greater than or equal to the beginning IP subnet index.

all: Removes all the associations between VLANs and IP subnets or IP addresses.

Description

Use the ip-subnet-vlan command to associate the current VLAN with a specified IP subnet or IP address.

Use the undo ip-subnet-vlan command to remove the association.

Note that the IP subnet or IP address cannot be a multicast network segment or a multicast address.

Related commands: display ip-subnet-vlan vlan.

Examples

# Configure VLAN 3 as an IP subnet-based VLAN and associate it with the 192.168.1.0/24 network segment.

<Sysname> system-view

[Sysname] vlan 3

[Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0

port hybrid ip-subnet-vlan vlan

Syntax

port hybrid ip-subnet-vlan vlan vlan-id

undo port hybrid ip-subnet-vlan { vlan vlan-id | all }

View

Ethernet interface view, port group view, Layer-2 aggregate interface view

Default Level

2: System level

Parameters

vlan-id: VLAN ID, in the range of 1 to 4094.

all: Specifies all VLANs.

Description

Use the port hybrid ip-subnet-vlan vlan command to associate the current Ethernet port with the specified IP subnet-based VLAN.

Use the undo port hybrid ip-subnet-vlan vlan command to remove the association.

On an Ethernet port associated with an IP subnet-based VLAN, if the source IP address of a received untagged packet belongs to the corresponding IP subnet, the port tags the packet with the corresponding VLAN tag.

l In Ethernet interface view, this command only applies to the current port.

l In port group view, this command applies to all ports in the port group. For information about port groups, refer to Ethernet Interface Configuration in the Access Volume.

Currently, only hybrid ports support this feature. Before issuing this command, make sure that you have assigned the port to the IP subnet-based VLAN to be associated with.

Related commands: display ip-subnet-vlan interface.

Examples

# Associate GigabitEthernet 2/0/1 with the IP subnet-based VLAN 3.

<Sysname> system-view

[Sysname] vlan 3

[Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0

[Sysname-vlan3] quit

[Sysname] interface GigabitEthernet 2/0/1

[Sysname-GigabitEthernet2/0/1] port link-type hybrid

[Sysname-GigabitEthernet2/0/1] port hybrid vlan 3 untagged

Please wait... Done.

[Sysname-GigabitEthernet2/0/1] port hybrid ip-subnet-vlan vlan 3

# Associate the hybrid Layer-2 aggregate interface Bridge-aggregation 1 with the IP subnet-based VLAN 3 (assuming that Bridge-aggregation 1 does not have member ports).

<Sysname> system-view

[Sysname] vlan 3

[Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0

[Sysname-vlan3] quit

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port link-type hybrid

[Sysname-Bridge-Aggregation1] port hybrid vlan 3 untagged

Please wait... Done

[Sysname-Bridge-Aggregation1] port hybrid ip-subnet-vlan vlan 3

# Associate the hybrid Layer-2 aggregate interface Bridge-aggregation 1 with the IP subnet-based VLAN 3. Among the member ports of the aggregation group corresponding to Bridge-aggregation 1,GigabitEthernet 2/0/1 is an access port and GigabitEthernet 2/0/2 is a trunk port.

<Sysname> system-view

[Sysname] vlan 3

[Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0

[Sysname-vlan3] quit

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port link-type access

Please wait... Done.

Configuring GigabitEthernet 2/0/1... Done.

Configuring GigabitEthernet 2/0/2............................. Done.

[Sysname-Bridge-Aggregation1] port link-type hybrid

[Sysname-Bridge-Aggregation1] port hybrid vlan 3 untagged

Please wait... Done.

Configuring GigabitEthernet 2/0/1... Done.

Configuring GigabitEthernet 2/0/2... Done.

[Sysname-Bridge-Aggregation1] port hybrid ip-subnet-vlan vlan 3

2 Super VLAN Configuration Commands

Super VLAN Configuration Commands

display supervlan

Syntax

display supervlan [ supervlan-id ]

View

Any view

Default Level

1: Monitor level

Parameters

supervlan-id: Super VLAN ID, in the range of 1 to 4094.

Description

Use the display supervlan command to display the mapping between a super VLAN and sub-VLANs, and the information of these VLANs.

Related commands: supervlan, subvlan.

Examples

# Display the mapping between a super VLAN and sub-VLANs.

<Sysname> display supervlan 2

Supervlan ID : 2

Subvlan ID : 3-5

VLAN ID: 2

VLAN Type: static

It is a Super VLAN.

Route Interface: configured

IP Address: 10.153.17.41

Subnet Mask: 255.255.252.0

Description: VLAN 0002

Tagged Ports: none

Untagged Ports: none

VLAN ID: 3

VLAN Type: static

It is a Sub VLAN.

Route Interface: not configured

Description: VLAN 0003

Tagged Ports: none

Untagged Ports:

GigabitEthernet2/0/3

VLAN ID: 4

VLAN Type: static

It is a Sub VLAN.

Route Interface: not configured

Description: VLAN 0004

Tagged Ports: none

Untagged Ports:

GigabitEthernet2/0/4

VLAN ID: 5

VLAN Type: static

It is a Sub VLAN.

Route Interface: not configured

Description: VLAN 0005

Tagged Ports: none

Untagged Ports:

GigabitEthernet2/0/5

Table 2-1 display supervlan command output description

Field	Description
Supervlan ID	Super VLAN ID
Subvlan ID	Sub-VLAN ID
VLAN ID	VLAN ID
VLAN Type	VLAN type, static or dynamic
Route Interface	Whether a VLAN interface is configured for the current VLAN. This field is the same for both sub-VLANs and the super VLAN.
IP Address	IP address of the VLAN interface, if configured. This field is the same for both sub-VLANs and the super VLAN.
Subnet Mask	Subnet mask of the VLAN interface, if configured. This field is the same for both sub-VLANs and the super VLAN.
Description	VLAN description
Tagged Ports	Ports through which packets of the VLAN are sent tagged.
Untagged Ports	Ports through which packets of this VLAN are sent untagged

subvlan

Syntax

subvlan vlan-list

undo subvlan [ vlan-list ]

View

VLAN view

Default Level

2: System level

Parameters

vlan-list: Sub-VLAN list, in the format of vlan-list = { vlan-id [ to vlan-id2 }&<1-10>, in which vlan-id represents the sub-VLAN ID and ranges from 1 to 4094. &<1-10> indicates you can specify up to 10 sub-VLAN IDs or sub-VLAN ID ranges.

Description

Use the subvlan command to associate the super VLAN with the specified sub-VLAN (s).

The current VLAN is the super VLAN whereas the VLANs specified by the vlan-list paramter are the sub-VLANs.

Use the undo subvlan command to remove the association.

Note:

l Ensure that the sub-VLANs already exist before associating them with a super VLAN.

l You can add/remove a port to/from a sub-VLAN already associated with a super VLAN.

l The undo subvlan command without vlan-list specified removes the association between the specified super VLAN and all its sub-VLANs, while the undo subvlan command with vlan-list specified only removes the association between the current super VLAN and the sub-VLANs specified by vlan-list.

Related commands: display supervlan.

Examples

# Associate VLAN 10 (the super VLAN) with VLAN 3, VLAN 4, VLAN 5, and VLAN 9 (the sub-VLANs).

<Sysname> system-view

[Sysname] vlan 10

[Sysname-vlan10] subvlan 3 to 5 9

supervlan

Syntax

supervlan

undo supervlan

View

VLAN view

Default Level

2: System level

Parameters

None

Description

Use the supervlan command to configure the current VLAN as a super VLAN.

Use the undo supervlan command to remove the super VLAN configuration for the current VLAN.

Note that:

l You cannot configure a super VLAN as the guest VLAN for a port, and vice versa. For more information about guest VLAN, refer to 802.1X Configuration in the Security Volume.

l You can configure Layer 2 multicast for a super VLAN. However, the configuration cannot take effect.

l You can configure DHCP, Layer 3 multicast, dynamic routing, and NAT for the VLAN interface of a super VLAN. However, only DHCP can take effect.

l Configuring VRRP for the VLAN interface of a super VLAN affects network performance. Therefore, it is not recommended to configure this function.

Related commands: display supervlan.

Examples

# Configure VLAN 2 as a super VLAN.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] supervlan

3 Isolate-User-VLAN Configuration Commands

Isolate-User-VLAN Configuration Commands

display isolate-user-vlan

Syntax

display isolate-user-vlan [ isolate-user-vlan-id ]

View

Any view

Default Level

1: Monitor level

Parameters

isolate-user-vlan-id: Isolate-user-VLAN ID, in the range of 1 to 4094.

Description

Use the display isolate-user-vlan command to display the mapping between an isolate-user-vlan and secondary VLAN(s), and the information of these VLANs.

Related commands: isolate-user-vlan, isolate-user-vlan enable.

Examples

# Display the mapping between an isolate-user-vlan and secondary VLANs.

<Sysname> display isolate-user-vlan

Isolate-user-VLAN VLAN ID : 2

Secondary VLAN ID : 3 4

VLAN ID: 2

VLAN Type: static

Isolate-user-VLAN type : isolate-user-VLAN

Route Interface: configured

IP Address: 1.1.1.1

Subnet Mask: 255.255.255.0

Description: VLAN 0002

Broadcast MAX-ratio: 100%

Tagged Ports: none

Untagged Ports:

GigabitEthernet2/0/2 GigabitEthernet2/0/3 GigabitEthernet2/0/4

VLAN ID: 3

VLAN Type: static

Isolate-user-VLAN type : secondary

Route Interface: configured

IP Address: 2.2.2.2

Subnet Mask: 255.255.255.0

Description: VLAN 0003

Broadcast MAX-ratio: 100%

Tagged Ports: none

Untagged Ports:

GigabitEthernet2/0/2 GigabitEthernet2/0/3

VLAN ID: 4

VLAN Type: static

Isolate-user-VLAN type : secondary

Route Interface: not configured

Description: VLAN 0004

Broadcast MAX-ratio: 100%

Tagged Ports: none

Untagged Ports:

GigabitEthernet2/0/2 GigabitEthernet2/0/4

Table 3-1 display isolate-user-vlan command output description

Field	Description
Isolate-user-VLAN VLAN ID	Isolate-user-VLAN ID
Secondary VLAN ID	Secondary VLAN ID
VLAN ID	VLAN ID
VLAN Type	VLAN type, static or dynamic
Isolate-user-VLAN type	Current VLAN type, isolate-user-VLAN or secondary VLAN
Route Interface	Whether a VLAN interface is configured for the VLAN
IP Address	IP address of the VLAN interface, if configured
Subnet Mask	Subnet mask of the VLAN interface, if configured
Description	VLAN description
Tagged Ports	Ports through which packets of this VLAN are sent tagged
Untagged Ports	Ports through which packets of this VLAN are sent untagged

isolate-user-vlan

Syntax

isolate-user-vlan isolate-user-vlan-id secondary secondary-vlan-id-list

undo isolate-user-vlan isolate-user-vlan-id [ secondary secondary-vlan-id-list ]

View

System view

Default Level

2: System level

Parameters

isolate-user-vlan-id: Isolate-user-VLAN ID, in the range 1 to 4094.

secondary secondary-vlan-id-list: Specifies a list of secondary VLAN IDs. You need to provide the secondary-vlan-id argument in the form of { secondary-vlan-id1 [ to secondary-vlan-id2 ] }&<1-10>, where secondary-vlan-id1 and secondary-vlan-id2 are VLAN IDs in the range 1 to 4094 and &<1-10> means that you can provide up to ten secondary VLAN IDs/secondary VLAN ID ranges.

Description

Use the isolate-user-vlan command to associate an isolate-user-VLAN with the specified secondary VLAN(s).

Use the undo isolate-user-vlan command to remove the association.

By default, an isolate-user-VLAN is not associated with any secondary VLAN. .

Note that:

l To use the isolate-user-vlan command, each of the isolate-user-VLAN and the secondary VLAN(s) must have at least one port which allows its isolate-user-VLAN or secondary VLAN to pass through. The default VLAN of the port must be its isolate-user-VLAN or secondary VLAN.

l The undo isolate-user-vlan command without the secondary secondary-vlan-id parameter specified removes the association between the specified isolate-user-VLAN and all its secondary VLANs, while the undo isolate-user-vlan command with the secondary secondary-vlan-id parameter specified only removes the association between the specified isolate-user-VLAN and the specified secondary VLANs.

After associating an isolate-user-VLAN with the specified secondary VLANs, you cannot add/remove a port to/from each involved VLAN or remove each involved VLAN. To do that, you must cancel the association first.

Related commands: display isolate-user-vlan.

Examples

# Associate isolate-user-VLAN 2 with the secondary VLANs VLAN 3 and VLAN 4.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] isolate-user-vlan enable

[Sysname-vlan2] port GigabitEthernet 2/0/2

[Sysname-vlan2] vlan 3

[Sysname-vlan3] port GigabitEthernet 2/0/3

[Sysname-vlan3] vlan 4

[Sysname-vlan4] port GigabitEthernet 2/0/4

[Sysname-vlan4] quit

[Sysname] isolate-user-vlan 2 secondary 3 to 4

isolate-user-vlan enable

Syntax

isolate-user-vlan enable

undo isolate-user-vlan enable

View

VLAN view

Default Level

2: System level

Parameters

None

Description

Use the isolate-user-vlan enable command to configure the current VLAN as an isolate-user-VLAN.

Use the isolate-user-vlan enable command to remove the isolate-user-VLAN configuration for the current VLAN.

By default, no VLAN is an isolate-user-VLAN.

An isolate-user-VLAN may include multiple ports, including the one connected to the upstream device.

Related commands: display isolate-user-vlan.

Examples

# Configure VLAN 5 as an isolate-user-VLAN.

<Sysname> system-view

[Sysname] vlan 5

[Sysname-vlan5] isolate-user-vlan enable

4 Voice VLAN Configuration Commands

Voice VLAN Configuration Commands

display voice vlan oui

Syntax

display voice vlan oui

View

Any view

Default Level

1: Monitor level

Parameters

None

Description

Use the display voice vlan oui command to display the currently supported organizationally unique identifier (OUI) addresses, the OUI address masks, and the description strings.

Related commands: voice vlan, voice vlan enable.

In general, as the first 24 bits of a MAC address (in binary format), an OUI address is a globally unique identifier assigned to a vendor by IEEE. OUI addresses mentioned in this document, however, are different from those in common sense. OUI addresses in this document are used to determine whether a received packet is a voice packet. They are the results of the AND operation of the two arguments mac-address and oui-mask in the voice vlan mac-address command.

Examples

# Display the currently supported OUI addresses.

<Sysname> display voice vlan oui

Oui Address Mask Description

0001-e300-0000 ffff-ff00-0000 Siemens phone

0003-6b00-0000 ffff-ff00-0000 Cisco phone

0004-0d00-0000 ffff-ff00-0000 Avaya phone

0060-b900-0000 ffff-ff00-0000 Philips/NEC phone

00d0-1e00-0000 ffff-ff00-0000 Pingtel phone

00e0-7500-0000 ffff-ff00-0000 Polycom phone

00e0-bb00-0000 ffff-ff00-0000 3com phone

Table 4-1 display voice vlan oui command output description

Field	Description
Oui Address	OUI addresses supported
Mask	Masks of the OUI addresses supported
Description	Description strings of the OUI addresses supported

display voice vlan state

Syntax

display voice vlan state

View

Any view

Default Level

1: Monitor level

Parameters

None

Description

Use the display voice vlan state command to display voice VLAN configuration.

Related commands: voice vlan vlan-id enable, voice vlan enable.

Examples

# Display voice VLAN configurations.

<Sysname> display voice vlan state

Voice VLAN status: ENABLE

Voice VLAN ID: 2

Voice VLAN security mode: Security

Voice VLAN aging time: 1440 minutes

Voice VLAN enabled port and its mode:

PORT MODE

--------------------------------

GigabitEthernet2/0/2 MANUAL

GigabitEthernet2/0/3 MANUAL

GigabitEthernet2/0/4 MANUAL

GigabitEthernet2/0/5 AUTO

Table 4-2 display voice vlan state command output description

Field	Description
Voice VLAN status	The current voice VLAN status: ENABLE or DISABLE.
Voice VLAN ID	ID of the voice VLAN
Voice VLAN security mode	Security mode for the voice VLAN
Voice VLAN aging time	Aging time of the voice VLAN
Current voice vlan enabled port and its mode	Voice VLAN-enabled port and its voice VLAN mode
PORT	Port name
MODE	Voice VLAN mode of the port: manual or automatic.

voice vlan

Syntax

voice vlan vlan-id enable

undo voice vlan enable

View

System view

Default Level

2: System level

Parameters

vlan-id: ID of the VLAN to be enabled with the voice VLAN feature, in the range of 2 to 4094.

Description

Use the voice vlan command to enable the voice VLAN feature globally.

Use the undo voice vlan enable command to disable the voice VLAN feature globally.

l At a moment, only one VLAN can be enabled with the voice VLAN feature on a device.

l The VLAN to be configured as the voice VLAN must already exist and cannot be VLAN 1.

l To remove a voice VLAN, .disable the voice VLAN feature on the VLAN first.

Related commands: display voice vlan state.

Examples

# Enable the voice VLAN feature on VLAN 2 (assuming that VLAN 2 already exists).

<Sysname> system-view

[Sysname] voice vlan 2 enable

voice vlan aging

Syntax

voice vlan aging minutes

undo voice vlan aging

View

System view

Default Level

2: System level

Parameters

minutes: Voice VLAN aging time, in the range 5 to 43200 minutes.

Description

Use the voice vlan aging command to configure the voice VLAN aging time.

Use the undo voice vlan aging command to restore the default.

By default, the voice VLAN aging time is 1440 minutes.

When a port in automatic voice VLAN mode receives a voice packet, the system decides whether to assign the port to the voice VLAN based on the source MAC address of the voice packet. Upon assigning the port to the voice VLAN, the system starts the aging timer. If no voice packets are received on the port until the aging time expires, the system automatically removes the port from the voice VLAN.

Related commands: display voice vlan state.

Examples

# Configure the voice VLAN aging time as 100 minutes.

<Sysname> system-view

[Sysname] voice vlan aging 100

voice vlan enable

Syntax

voice vlan enable

undo voice vlan enable

View

Ethernet interface view

Default Level

2: System level

Parameters

None

Description

Use the voice vlan enable command to enable the voice VLAN feature on an Ethernet port.

Use the undo voice vlan enable command to disable the voice VLAN feature on an Ethernet port.

The voice VLAN feature is not enabled on a port by default.

l You cannot enable the voice VLAN feature on an access port operating in automatic voice VLAN mode.

l Enable the voice VLAN feature globally before enabling the voice VLAN feature on a port.

l The voice VLAN functions properly only after the voice VLAN feature is enabled both globally and on a port.

Examples

# Enable the voice VLAN feature on GigabitEthernet 2/0/1.

<Sysname> system-view

[Sysname] voice vlan 2 enable

[Sysname] interface gigabitethernet 2/0/1

[Sysname-GigabitEthernet2/0/1] voice vlan enable

voice vlan mac-address

Syntax

voice vlan mac-address mac-addr mask oui-mask [ description text ]

undo voice vlan mac-address oui

View

System view

Default Level

2: System level

Parameters

mac-addr: Source MAC address of voice traffic, in the format of H-H-H, such as 1234-1234-1234.

mask oui-mask: Specifies the valid length of the OUI address by a mask in the format of H-H-H, with the high-order bits being consecutive fs and the low-order bits being 0s, for example, ffff-f000-0000.

description text: Specifies a string that describes the OUI address. The string is of 1 to 30 case-sensitive characters.

oui: Specifies the OUI address to be removed, in the format of H-H-H, such as 1234-1200-0000. An OUI address is the logic AND result of mac-addr and oui-mask. An OUI address cannot be a broadcast address, a multicast address, or an address of all 0s or all fs. You can use the display voice vlan oui command to display the OUI addresses supported currently.

Description

Use the voice vlan mac-address command to add a recognizable OUI address.

Use the undo voice vlan mac-address command to remove a recognizable OUI address.

The system supports up to 16 OUI addresses.

By default, the system is configured with the default OUI addresses, as illustrated in Table 4-3. You can remove the default OUI addresses and then add recognizable OUI addresses manually.

Table 4-3 Default OUI addresses

Number	OUI	Description
1	0001-e300-0000	Siemens phone
2	0003-6b00-0000	Cisco phone
3	0004-0d00-0000	Avaya phone
4	0060-b900-0000	Philips/NEC phone
5	00d0-1e00-0000	Pingtel phone
6	00e0-7500-0000	Polycom phone
7	00e0-bb00-0000	3com phone

Related commands: display voice vlan oui.

Examples

# Add a recognizable OUI address 1234-1200-0000 by specifying the MAC address as 1234-1234-1234 and the mask as fff-ff00-0000, and configure its description string as PhoneA.

<Sysname> system-view

[Sysname] voice vlan mac-address 1234-1234-1234 mask ffff-ff00-0000 description PhoneA

# Display the supported OUI addresses to verify the above configuration.

<Sysname> display voice vlan oui

Oui Address Mask Description

0001-e300-0000 ffff-ff00-0000 Siemens phone

0003-6b00-0000 ffff-ff00-0000 Cisco phone

0004-0d00-0000 ffff-ff00-0000 Avaya phone

0060-b900-0000 ffff-ff00-0000 Philips/NEC phone

00d0-1e00-0000 ffff-ff00-0000 Pingtel phone

00e0-7500-0000 ffff-ff00-0000 Polycom phone

00e0-bb00-0000 ffff-ff00-0000 3com phone

1234-1200-0000 ffff-ff00-0000 PhoneA

# Remove the OUI address 1234-1200-0000.

<Sysname> system-view

[Sysname] undo voice vlan mac-address 1234-1200-0000

voice vlan mode auto

Syntax

voice vlan mode auto

undo voice vlan mode auto

View

Ethernet interface view

Default Level

2: System level

Parameters

None

Description

Use the voice vlan mode auto command to configure the current port to operate in automatic voice VLAN mode.

Use the undo voice vlan mode auto command to configure the current port to operate in manual voice VLAN mode.

By default, a port operates in automatic voice VLAN mode.

The voice VLAN modes of different ports are independent of one another.

To make voice VLAN take effect on a port which is enabled with voice VLAN and operates in manual voice VLAN mode, you need to assign the port to the voice VLAN manually.

Examples

# Configure GigabitEthernet 2/0/1 to operate in manual voice VLAN mode.

<Sysname> system-view

[Sysname] interface gigabitethernet 2/0/1

[Sysname-GigabitEthernet2/0/1] undo voice vlan mode auto

voice vlan security enable

Syntax

voice vlan security enable

undo voice vlan security enable

View

System view

Default Level

2: System level

Parameters

None

Description

Use the voice vlan security enable command to enable voice VLAN security mode.

Use the undo voice vlan security enable command to disable voice VLAN security mode.

By default, voice VLAN security mode is not enabled.

Only the voice vlan security enable command or the undo voice vlan security enable command issued before the voice vlan vlan-id enable command takes effect.

Examples

# Disable voice VLAN security mode.

<Sysname> system-view

[Sysname] undo voice vlan security enable

01-Access Volume

1 VLAN Configuration Commands

VLAN Configuration Commands

display interface vlan-interface

display vlan

interface vlan-interface

vlan

Port-Based VLAN Configuration Commands

port link-type

MAC Address-Based VLAN Configuration Commands

display protocol-vlan interface

display protocol-vlan vlan

IP Subnet-Based VLAN Configuration Commands

display ip-subnet-vlan interface

port hybrid ip-subnet-vlan vlan

2 Super VLAN Configuration Commands

display supervlan

subvlan

supervlan

display isolate-user-vlan

isolate-user-vlan

isolate-user-vlan enable

4 Voice VLAN Configuration Commands

Cloud & AI

InterConnect

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Resources

Partner Business Management

Company Information

News & Events

Contact Us