No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


S12700 V200R010C00 Configuration Guide - Ethernet Switching

This document describes the configuration of Ethernet services, including configuring link aggregation, VLANs, Voice VLAN, VLAN mapping, QinQ, GVRP, MAC table, STP/RSTP/MSTP, SEP, and so on.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Using VLAN Assignment to Implement Layer 2 Isolation

Using VLAN Assignment to Implement Layer 2 Isolation

Interface-based VLAN Assignment

In Figure 4-16, there are multiple companies in a building. These companies share network resources to reduce costs. Networks of the companies connect to different interfaces of the same Layer 2 switch and access the Internet through an egress router.

Figure 4-16  Networking of interface-based VLAN assignment

To isolate services and ensure that each company is secure, add interfaces connected to each company to different VLANs. Each company has a virtual router and each VLAN is a virtual work group.

MAC Address-based VLAN Assignment

In Figure 4-17, a company has two office areas that connect to the company's network through Switch_2 and Switch_3 respectively. Employees often move between the two office areas.

Figure 4-17  Networking of MAC address-based VLAN assignment

To enable employees to access network resources after they move between different office areas, configure MAC address-based VLAN assignment on Switch_2 and Switch_3. As long as the MAC address of User_1 remains unchanged, the VLAN of the user will not change and they can still access the company's network resources after changing the location.

IP Subnet-based VLAN Assignment

In Figure 4-18, a company has two departments: departments 1 and 2. The two departments are assigned fixed IP network segments. The employees often move between locations, but the company requires that their network resource access rights remain unchanged.

Figure 4-18  Networking of IP subnet-based VLAN assignment

To ensure that employees retain access to network resources after changing locations, configure IP subnet-based VLAN assignment on the company's central switch. Different network segments of servers are assigned to different VLANs to isolate data flows of different application services, improving security.

Updated: 2019-08-21

Document ID: EDOC1000142081

Views: 274097

Downloads: 421

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Previous Next