HP 5500 Ei 5500 Si Switch Series Configuration Guide

 120 
VLAN interface configuration example 
Network requirements 
As shown in Figure 39, PC A is assigned to VLAN 5. PC B is assigned to VLAN 10. The PCs belong to 
different IP subnets and cannot communicate with each other. 
Configure VLAN interfaces on Switch A and configure the PCs to enable Layer 3 communication 
between the PCs. 
Figure 39  Network diagram 
 
 
Configuration procedure 
1. Configure Switch A: 
# Create VLAN 5 and assign GigabitEthernet 1/0/1 to it. 
 system-view 
[SwitchA] vlan 5...

 121 
2.
 
Display brief information about Layer 3 interfaces on Switch A to verify the configuration. 
 display ip interface brief 
*down: administratively down 
(s): spoofing 
Interface                     Physical Protocol IP Address      Descript\
ion 
Vlan-interface5               up       up       192.168.0.10    Vlan-int\
e... 
Vlan-interface10              up       up       192.168.1.20    Vlan-int\
e... 
Configuring port-based VLANs 
Introduction to port-based VLAN 
Port-based VLANs group VLAN...

 122 
 
Port type Actions (in the inbound direction) Actions (in the outbound 
direction) 
Untagged frame  Tagged frame 
Access 
Tags the frame with the 
PVID tag. 
•
 Receives the frame if its 
V L A N  I D  i s  t h e  s a m e  a s  t h e  
PVID. 
• Drops the frame if its VLAN 
ID is different from the 
PVID.   Removes the VLAN tag and 
sends the frame. 
Trunk 
Checks whether the PVID 
is permitted on the port: 
• If yes, tags the frame 
with the PVID tag. 
• If not, drops the 
frame. 
• Receives the...

 123 
Step Command Remarks 
2.  Enter interface view or 
port group view. 
• Enter Layer 2 Ethernet interface 
view:  
interface interface-type 
interface-number 
•  Enter Layer 2 aggregate 
interface view:  
interface bridge-aggregation 
interface-number 
•  Enter port group view:  
port-group manual 
port-group-name   Use any command. 
•
 The configuration made in Layer 2 
Ethernet interface view applies only to 
the port. 
• The configuration made in port group 
view applies to all ports in the port...

 124 
Step Command Remarks 
2.  Enter 
interface 
view or port 
group view. 
• Enter Layer 2 Ethernet interface 
view:  
interface interface-type 
interface-number 
•  Enter Layer 2 aggregate interface 
view:  
interface bridge-aggregation 
interface-number 
•  Enter port group view:  
port-group manual 
port-group-name   Use any command. 
•
 The configuration made in Layer 2 Ethernet 
interface view applies only to the port. 
• The configuration made in port group view 
applies to all ports in the port...

 125 
Step Command  Remarks 
2.  Enter interface 
view or port 
group view. 
• Enter Layer 2 Ethernet interface 
view:  
interface interface-type 
interface-number 
•  Enter Layer 2 aggregate interface 
view:  
interface bridge-aggregation 
interface-number 
•  Enter port group view:  
port-group manual 
port-group-name   Use any command. 
•
 The configuration made in Ethernet 
interface view applies only to the port. 
• The configuration made in port group 
view applies to all ports in the port group....

 126 
Figure 40 Network diagram 
 
 
Configuration procedure 
1. Configure Device A: 
# Create VLAN 100, and assign port GigabitEthernet 1/0/1 to VLAN 100. 
 system-view 
[DeviceA] vlan 100 
[DeviceA-vlan100] port gigabitethernet 1/0/1 
[DeviceA-vlan100] quit 
# Create VLAN 200, and assign port GigabitEthernet 1/0/2 to VLAN 200. 
[DeviceA] vlan 200 
[DeviceA-vlan200] port gigabitethernet 1/0/2 
[DeviceA-vlan200] quit 
# Configure port GigabitEthernet 1/0/3 as a trunk port, and assign it to VLANs 100 and...

 127 
[DeviceA-GigabitEthernet1/0/3] display vlan 200 
 VLAN ID: 200 
 VLAN Type: static 
 Route Interface: not configured 
 Description: VLAN 0200 
 Name: VLAN 0200 
Tagged   Ports: 
    GigabitEthernet1/0/3 
 Untagged Ports: 
    GigabitEthernet1/0/2 
Configuring MAC-based VLANs 
Introduction to MAC-based VLAN 
The MAC-based VLAN feature assigns hosts to a VLAN based on their MAC addresses. This feature is 
us u ally use d in c onju nction wi th secu ri t y te chnol o gies  such as  802.1 X to  provide...

 128 
multiple MAC address-to-VLAN entries, and enable the MAC-based VLAN feature and dynamic 
MAC-based VLAN assignment on the port.  
Dynamic MAC-based VLAN assignment uses the following workflows. 
1. When the port receives a frame, the port first determines whether the frame is tagged.  
•   If yes, the port reports the source MAC address of the frame. 
•   If not, the port selects a VLAN for the frame by tagging the untagged frame with the PVID tag and 
obtaining the tag, and then reports the source...

 129 
•  When a port is assigned to the corresponding  VLAN in a MAC address-to-VLAN entry, but has not 
been assigned to the VLAN by using the port hybrid vlan command, the port sends packets from 
the VLAN with VLAN tags removed. 
•   If you configure both static and dynamic MAC-based VLAN assignment on the same port, dynamic 
MAC-based VLAN assignment applies. 
Dynamic MAC-based VLAN 
You can use dynamic MAC-based VLAN with access authentication (such as 802.1X authentication 
based on MAC addresses)...