No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

AR100-S, AR110-S, AR120-S, AR150-S, AR160-S, AR200-S, AR1200-S, AR2200-S, and AR3200-S V200R009 CLI-based Configuration Guide - Ethernet Switching

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Overview of MUX VLANs

Overview of MUX VLANs

Background

The MUX VLAN function is used to control network resources based on VLANs.

For example, both enterprise employees and customers can access the servers on an enterprise network. The enterprise allows employees to communicate with each other but prevents customers from communicating with each other.

To allow all users to access the enterprise servers, inter-VLAN communication must be configured. If there are a large number of users in an enterprise, VLANs need to be assigned to the users that the enterprise wishes to restrict communication. This wastes VLAN IDs and adds significant workload to network configuration and maintenance.

MUX VLAN meets the isolation requirements.

Basic Concepts

A MUX VLAN consists of principal VLANs and subordinate VLANs; subordinate VLANs are classified into separate VLANs and group VLANs. See Table 5-1 for a description of these roles.

Table 5-1  Roles in MUX VLAN

MUX VLAN

VLAN Type

Associated Interface

Access Authority

Principal VLAN

-

Principal interface

A principal interface can communicate with all interfaces in a MUX VLAN.

Subordinate VLAN

Separate VLAN

Separate interface

A separate interface can communicate only with a principal interface and is isolated from other types of interfaces.

Each separate VLAN must be bound to a principal VLAN.

Group VLAN

Group interface

A group interface can communicate with a principal interface and the other interfaces in the same group, but cannot communicate with interfaces in other groups or a separate interface.

Each group VLAN must be bound to a principal VLAN.

Communication in the MUX VLAN

As shown in Figure 5-1, the principal port connects to the enterprise server; the separate port connects to enterprise customers; the group port connects to enterprise employees. Accordingly, both enterprise customers and employees can access the enterprise server, enterprise employees can communicate with each other, enterprise customers cannot communicate with each other, and enterprise customers and employees cannot communicate with each other.

Figure 5-1  MUX VLAN

Translation
Download
Updated: 2019-05-17

Document ID: EDOC1000174108

Views: 55985

Downloads: 41

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next