HP 5500 Ei 5500 Si Switch Series Configuration Guide

 140 
[DeviceC] vlan 100 
[DeviceC-vlan100] ip-subnet-vlan ip 192.168.5.0 255.255.255.0 
[DeviceC-vlan100] quit 
# Associate IP subnet 192.168.50.0/24 with VLAN 200. 
[DeviceC] vlan 200 
[DeviceC-vlan200] ip-subnet-vlan ip 192.168.50.0 255.255.255.0 
[DeviceC-vlan200] quit 
# Configure interface GigabitEthernet 1/0/11 to permit packets of VLAN 100 to pass through. 
[DeviceC] interface GigabitEthernet 1/0/11 
[DeviceC-GigabitEthernet1/0/11] port link-type hybrid 
[DeviceC-GigabitEthernet1/0/11] port...

 141 
Configuration guidelines 
The IP subnet-based VLAN configurations are only effective on hybrid ports. 
Displaying and maintaining VLAN 
 
Task Command Remarks 
Display VLAN information. display
 vlan  [ vlan-id1  [ to vlan-id2  ] | all | dynamic 
|  reserved  | static  ] [ | { begin  | exclude  | include  } 
regular-expression  ]   Available in any 
view 
Display VLAN interface 
information.  display interface
 [ vlan-interface ] [ brief  [ down ] ] [ | 
{  begin |  exclude | include  }...

 142 
Configuring a super VLAN (available only on 
the 5500 EI) 
Overview 
Super VLAN, also called VLAN aggregation, was introduced to save IP address space.  
A super VLAN is associated with multiple sub-VLANs. You can create a VLAN interface for a super VLAN 
and assign an IP address for the VLAN interface. However, you cannot create a VLAN interface for a 
sub-VLAN. You can assign a physical port to a sub-VLAN, but not to a super VLAN. All ports of a 
sub-VLAN use the VLAN interface IP address of the...

 143 
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Enter VLAN view. 
vlan vlan-id   If the specified VLAN does not exist, this command 
creates the VLAN first, and then enters VLAN view. 
3.
  Configure the VLAN as a 
super VLAN.  supervlan 
Not configured by default. 
4.  Associate the super 
VLAN with the specified 
sub-VLANs.  subvlan 
vlan-list  VLANs specified by 
vlan-list must be the 
sub-VLANs configured earlier.  
 
  NOTE: 
•  When dynamic MAC-based VLAN assignment is...

 144 
Step Command Remarks 
4.  Enable local proxy ARP. 
local-proxy-arp enable 
Use either command. 
Disabled by default. 
5.  Enable local proxy ND. 
local-proxy-nd enable 
 
Displaying and maintaining super VLAN 
 
Task Command Remarks 
Display the mapping between a 
super VLAN and its sub-VLANs.  display supervlan 
[ supervlan-id  ] [ | { begin  | 
exclude  | include  } regular-expression ]  Available in any view 
 
Super VLAN configuration example 
Network requirements 
As shown in 
Figure 45: 
•...

 145 
# Create VLAN 2, and assign GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to it. 
[Sysname] vlan 2 
[Sysname-vlan2] port gigabitethernet 1/0/1 gigabitethernet 1/0/2 
[Sysname-vlan2] quit 
# Create VLAN 3, and assign GigabitEthernet 1/0/3 and GigabitEthernet 1/0/4 to it. 
[Sysname] vlan 3 
[Sysname-vlan3] port gigabitethernet 1/0/3 gigabitethernet 1/0/4 
[Sysname-vlan3] quit 
# Create VLAN 5, and assign GigabitEthernet 1/0/5 and GigabitEthernet 1/0/6 to it. 
[Sysname] vlan 5 
[Sysname-vlan5] port...

 146 
    GigabitEthernet1/0/1     GigabitEthernet1/0/2 
 
 VLAN ID: 3 
 VLAN Type: static 
 It is a Sub VLAN. 
 Route Interface: configured 
 IPv4 Address: 10.0.0.1 
 IPv4 Subnet Mask: 255.255.255.0 
 Description: VLAN 0003 
 Name: VLAN 0003 
 Tagged   Ports: none 
 Untagged Ports: 
    GigabitEthernet1/0/3     GigabitEthernet1/0/4 
 
 VLAN ID: 5 
 VLAN Type: static 
 It is a Sub VLAN. 
 Route Interface: configured 
 IPv4 Address: 10.0.0.1 
 IPv4 Subnet Mask: 255.255.255.0 
 Description: VLAN 0005...

 147 
Configuring an isolate-user-VLAN 
Overview 
An isolate-user-VLAN uses a two-tier VLAN structure. In this approach, the following types of VLANs, 
isolate-user-VLAN and secondary VLAN, are configured on the same device. 
The following are the characteristics of the isolate-user-VLAN implementation: 
•  Isolate-user-VLANs are mainly used for upstream data exchange. An isolate-user-VLAN can be 
associated with multiple secondary VLANs. As  the upstream device identifies only the 
isolate-user-VLAN and...

 148 
{ For more information about the promiscuous and host mode commands, see  Layer 2—LAN 
Switching Command Reference .  
4. Associate the isolate-user-VLAN with the specified secondary VLANs. 
Configuration restrictions and guidelines 
•  To enable users in the isolate-user-VLAN to communicate with other networks at Layer 3, follow 
these steps: 
a. Configure VLAN interfaces for the isolate-user -VLAN and the secondary VLANs, and configure 
the gateway IP address for the isolate-user-VLAN  interface...

 149 
Step Command Remarks 
8.  Configure the uplink port.  a.
 Enter Layer 2 Ethernet or 
aggregate interface view:
 
interface  interface-type 
interface-number 
Or  
interface 
bridge-aggregation 
interface-number 
b.  Con figure the port to 
operate in promiscuous 
mode in a specific VLAN:
 
port isolate-user-vlan  
vlan-id  promiscuous  N/A 
9.
  Return to system view. 
quit  N/A 
10. Configure the downlink port.  a.
 Enter Layer 2 Ethernet or 
aggregate interface view:
 
interface  interface-type...