3com S7906E Instruccion De Instalación

 

1-7 

 

z 

Enable the dynamic address binding support of IP Source Guard to filter packets received on a port 

based on the source IP address and MAC address bindings created dynamically to prevent illegal 

packets from passing through the port. For information about this feature, refer to IP Source Guard 

Configuration in the Security Volume.  

z 

To save system resources, disable user bindings recording on the DHCP snooping trusted ports 

that forward DHCP packets. For information about this feature, refer to DHCP Configuration in the 

IP Services Volume.  

Perform one-to-one VLAN mapping on the corridor switches shown in 

 to use VLANs to 

isolate different services of different users.  

The CVLAN-to-SVLAN mappings have been planned.  

Follow these steps to configure a one-to-one VLAN mapping:  

Enter system view 

— 

Create a VLAN 

vlan vlan-id 

Create a CVLAN 
and a SVLAN 

Exit to system 
view 

Required 

By default, only the 
default VLAN (VLAN 1) 
exists.  

Repeat these steps for 
all CVLANs and SVLANs 
involved in VLAN 
mapping. 

Configure an uplink policy to map the 
CVLAN to the SVLAN 

Refer to 

 Required 

Configure a downlink policy to map the 
SVLAN to the original CVLAN 

Refer to 

 Required 

Enter interface view of the downlink 
port 

interface interface-type 
interface-number 

— 

Set the link type of the downlink port to 
trunk 

port link-type trunk 

Required 

Configure the downlink port to permit 
the specified CVLANs and SVLANs or 
all VLANs to pass through 

port trunk permit vlan 
{ vlan-id-list | all } 

Required 

By default, a trunk port 
permits only VLAN 1 to 
pass through.  

Enable basic QinQ on the port 

Required 

Apply the uplink policy to the inbound 
direction of the downlink port 

qos apply policy policy-name 
inbound 

Required 

Apply the downlink policy to the 
outbound direction of the downlink port

qos apply policy policy-name 
outbound 

Required