3com 8807 User Guide

Page of 883
66
C
HAPTER
 9: I
SOLATE
-
USER
-VLAN C
ONFIGURATION
Configuring an 
isolate-user-VLAN
Configuring a Secondary 
VLAN
An isolate-user-VLAN can correspond to up to 64 Secondary VLANs.
You can configure up to 32 isolate-user-VLANs for a system.
You can configure up to 1,024 Secondary VLANs for a system.
You cannot configure the same MAC address in a Secondary VLAN 
corresponding to an isolate-user-VLAN.
If a VLAN is an isolate-user-VLAN or a Secondary VLAN, you cannot configure 
vlan-interface; a VLAN configured with vlan-interface cannot be configured as 
an isolate-user-VLAN or a Secondary VLAN.
Mapping an 
isolate-user-vlan to 
Secondary VLANs
Table 48   Configure an isolate-user-VLAN
Operation 
Command 
Description 
Enter system view 
system-view 
Create a VLAN 
vlan vlan-id 
Required 
Configure the VLAN as an 
isolate-user-VLAN 
isolate-user-vlan enable 
Required
You cannot configure VLAN 1 
as an isolate-user-VLAN 
Add ports to the 
isolate-user-VLAN 
port interface-list 
Optional
An isolate-user-VLAN can 
contain multiple ports, 
including upstream ports 
connecting to other switches. 
However the contained ports 
can only be access or hybrid 
ports, not trunk ports.
Table 49   Configure a Secondary VLAN
Operation 
Command 
Description 
Enter system view 
system-view 
Create a VLAN as a Secondary 
VLAN 
vlan vlan-id 
Required
You cannot configure VLAN 1 
as a Secondary VLAN. 
Add ports to the Secondary 
VLAN 
port interface-list 
Optional
You can add multiple ports 
(not uplink ports) to a 
Secondary VLAN.
Table 50   Map an isolate-user-VLAN to secondary VLANs
Operation 
Command 
Description 
Enter system view 
system-view 
Map an isolate-user-VLAN to 
secondary VLANs 
isolate-user-vlan 
isolate-user-vlan-num secondary 
secondary-vlan-numlist 
Required