Configuration Task Summary
Table 4-5 describes the VLAN configuration tasks. Figure 4-23 illustrates the logical relationship between configuration tasks.
| Configuration Task | Description |
|---|---|
VLANs can isolate the hosts that do not need to communicate with each other, which improves network security, reduces broadcast traffic, and mitigates broadcast storms. |
|
After VLANs are assigned, users in different VLANs cannot directly communicate with each other. If users in different VLANs need to communicate, configure VLANIF interfaces to implement inter-VLAN Layer 3 connectivity. NOTE:
You can also configure a VLAN termination sub-interface or VLAN Switch to implement inter-VLAN connectivity. For details about the VLAN termination sub-interface and VLAN switching, see Using a Dot1q Termination Sub-interface to Implement Inter-VLAN Communication and VLAN Switch Configuration. |
|
Configuring a Traffic Policy to Implement Intra-VLAN Layer 2 Isolation |
After VLANs are assigned, users in the same VLAN can directly communicate with each other. If some users in the same VLAN need to be isolated, configure MQC-based intra-VLAN Layer 2 isolation. NOTE:
Intra-VLAN isolation can also be implemented using port isolation. For details about port isolation, see Configuring Port Isolation in "Ethernet Interface Configuration" in the S12700 V200R010C00 Configuration Guide - Interface Management. |
Configuring a Traffic Policy to Implement Inter-VLAN Layer 3 Isolation |
After VLANIF interfaces are configured to implement inter-VLAN connectivity, users in different VLANs can communicate at Layer 3. If some users in different VLANs require unidirectional communication or need to be isolated, configure a traffic policy. |
To use the NMS to manage devices in a centralized manner, assign VLANs and configure a VLAN as the management VLAN. |
|
Configuring Transparent Transmission of Protocol Packets in a VLAN |
An interface sends protocol packets of all VLANs to the CPU for processing, affecting the forwarding efficiency. You can configure protocol packet transparent transmission in a VLAN so that the switch sends only protocol packets in a specified VLAN. This function improves the forwarding efficiency. |