No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Configuration Guide - Ethernet Switching

CloudEngine 8800, 7800, 6800, and 5800 V200R003C00

This document describes the configuration of Ethernet services, including configuring MAC address table, link aggregation, VLANs, MUX VLAN, Voice VLAN, VLAN mapping, QinQ, GVRP, VCMP, STP/RSTP/MSTP, VBST, SEP, RRPP, ERPS, LBDT, and Layer 2 protocol transparent transmission.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Protocol-based VLAN Assignment

Protocol-based VLAN Assignment



CE6810LI does not support protocol-based VLAN assignment.

The switch enabled with protocol-based VLAN assignment cannot process protocol packets sent to the CPU, and it is recommended that protocol-based VLAN assignment be used in Layer 2 transparent transmission scenarios.

Both IP subnet-based and protocol-based VLAN assignment are called network layer-based VLAN assignment, which reduces manual VLAN configuration workload and allows users to easily join a VLAN, transfer from one VLAN to another, and exit from a VLAN. The switch that has protocol-based VLAN assignment enabled processes only untagged frames, and treats tagged frames in the same manner as interface-based VLAN assignment.

When receiving an untagged frame from an interface, the switch identifies the protocol profile of the frame and then determines the VLAN that the frame belongs to.
  • If protocol-based VLANs are configured on the interface and the protocol profile of the frame matches a protocol-based VLAN, the switch adds the VLAN tag to the frame.

  • If protocol-based VLANs are configured on the interface and the protocol profile of the frame matches no protocol-based VLAN, the switch adds the PVID of the interface to the frame.


  1. Run system-view

    The system view is displayed.

  2. (Optional) Run vlan assign global { vlan-id1 [ to vlan-id2 ] } &<1-5>

    VLANs that can be globally assigned are specified.


    Only the CE8800 series switches, CE7800 series switches, CE6875EI, CE6870EI, CE6860EI, CE6850U-HI, CE6851HI, CE6850HI, CE6856HI, and CE6855HI support this configuration.

    After VLANs are assigned, the VLANs created using the vlan vlan-id command must be within the assignable VLAN range.

  3. (Optional) Run vlan reserved vlan-id

    A reserved VLAN is configured.

    By default, the reserved VLAN ID ranges from 4064 to 4094. After vlan-id is specified, the VLAN specified by vlan-id to the VLAN specified by vlan-id plus 30 are configured as reserved VLANs.

    CE6880EI does not support this step.

  4. Run vlan vlan-id

    A VLAN is created, and the VLAN view is displayed. If the specified VLAN has been created, the VLAN view is directly displayed.

    The VLAN ID ranges from 1 to 4094 (excluding reserved VLANs). If VLANs need to be created in batches, run the vlan batch { vlan-id1 [ to vlan-id2 ] } &<1-10> command to create VLANs in batches, and then run the vlan vlan-id command to enter the view of a specified VLAN.


    If a device is configured with multiple VLANs, configuring names for these VLANs is recommended:

    Run the name vlan-name command in the VLAN view. After a VLAN name is configured, you can run the vlan vlan-name vlan-name command in the system view to enter the corresponding VLAN view.

    Manually configuring and maintaining VLANs is challenging on a large Layer 2 network. Configuration inconsistency may occur. To improve maintenance efficiency and simplify configuration, run the vlan range { vlan-id1 [ to vlan-id2 ] } &<1-10> command to create a temporary VLAN range and configure services in the VLAN range view. Services are then delivered in batches to all the VLANs in the VLAN range.

  5. Run protocol-vlan [ protocol-index ] { at | ipv4 | ipv6 | ipx { ethernetii | llc | raw | snap } | mode { ethernetii-etype etype-id1 | llc dsap dsap-id ssap ssap-id | snap-etype etype-id2 } }

    Protocols are associated with VLANs and a protocol profile is specified.

    • protocol-index specifies the index of a protocol profile.

      A protocol profile depends on protocol types and encapsulation formats, and a VLAN associated with a protocol can be defined in a protocol profile.

    • When specifying the source and destination service access points, pay attention to the following points:

      • dsap-id and ssap-id cannot be both set to 0xaa.

      • dsap-id and ssap-id cannot be both set to 0xe0. 0xe0 indicates llc, encapsulation format of IPX packets.

      • dsap-id and ssap-id cannot be both set to 0xff. 0xff indicates raw, encapsulation format of IPX packets.

  6. Run quit

    The system view is displayed.

  7. Configure attributes for the Ethernet interface.

    1. Run interface interface-type interface-number

      The view of the interface that allows the protocol-based VLAN is displayed.

    2. Run port link-type hybrid

      The interface is configured as the hybrid interface.

      Protocol-based VLAN assignment can only be configured on hybrid interfaces.

    3. Run port hybrid untagged vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all }

      The hybrid interface is configured to allow the protocol-based VLAN.

  8. Run protocol-vlan vlan vlan-id { all | protocol-index1 [ to protocol-index2 ] } [ priority priority ]

    The interface is associated with a protocol-based VLAN.

    • vlan-id must be the ID of a protocol-based VLAN.

    • priority specifies the 802.1p priority of a protocol-based VLAN. The value ranges from 0 to 7. A larger value indicates a higher priority. The default value is 0. After the 802.1p priority of a protocol-based VLAN is specified, the switch first forwards high-priority frames in the case of congestion.

  9. Run commit

    The configuration is committed.

Updated: 2019-05-08

Document ID: EDOC1100004351

Views: 128904

Downloads: 297

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next