No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

ME60 V800R010C10SPC500 Configuration Guide - LAN Access and MAN Access 01

This is ME60 V800R010C10SPC500 Configuration Guide - LAN Access and MAN Access

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring VLAN Aggregation to Save IP Addresses

Configuring VLAN Aggregation to Save IP Addresses

VLAN aggregation prevents the waste of IP addresses and implements inter-VLAN communication.

Applicable Environment

As networks expand, address resources become insufficient. VLAN aggregation is developed to save IP addresses.

In VLAN aggregation, one super-VLAN is associated with multiple sub-VLANs. Physical ports cannot join a super-VLAN but a VLANIF interface can be created for the super-VLAN and an IP address can be assigned to the VLANIF interface. Physical ports can join a sub-VLAN but no VLANIF interface can be created for the sub-VLAN. All the interfaces in the sub-VLAN use the same IP address with the VLANIF interface of the super-VLAN. This saves subnet IDs, default gateway addresses of the subnets, and directed broadcast addresses of the subnets. In addition, different broadcast domains can use the addresses in the same subnet segment. As a result, subnet differences are eliminated, addressing becomes flexible, and the number of idle addresses is reduced. VLAN aggregation allows each sub-VLAN to function as a broadcast domain and reduces the waste of IP addresses to be assigned to ordinary VLANs.

Figure 8-13 shows the typical VLAN aggregation networking.

Figure 8-13 Typical networking diagram for VLAN aggregation

Pre-configuration Tasks

Before configuring VLAN aggregation, complete the following task:

  • Connecting ports and configuring physical parameters of the ports, ensuring that the ports are physically Up

Configuration Procedures

Figure 8-14 Procedure of configuring VPN aggregation

Creating a Sub-VLAN

Each sub-VLAN functions as a broadcast domain.

Procedure

  1. Run system-view

    The system view is displayed.

    NOTE:
    The type of the port that is added into the VLAN must be access or hybrid. If the port type is incorrect, run the port link-type { access | hybrid } command in the corresponding interface view to change the port type to access or hybrid. Specific steps are as follows:
    1. Run interface interface-type interface-number

      The interface view is displayed.

    2. Run portswitch

      The mode of the port is set to Layer 2.

    3. Run port link-type { access | hybrid }

      The type of the port is set to access or hybrid.

    4. Run commit

      The configuration is committed.

    5. Run quit

      Exit from the interface view.

  2. Run vlan vlan-id

    A sub-VLAN is created and the sub-VLAN view is displayed.

    NOTE:

    If a device is configured with multiple VLANs, do as follows to configure a name for each VLAN:

    Run the name vlan-name command in the VLAN view. After a VLAN name is configured, you can run the vlan vlan-name vlan-name command in the system view to enter the corresponding VLAN view.

  3. Run port interface-type { interface-number1 [ to interface-number2 ] } &<1-10>

    A port is added to the sub-VLAN.

  4. Run commit

    The configuration is committed.

Creating a Super-VLAN

A super-VLAN consists of several sub-VLANs. No physical port can be added to a super-VLAN, but a VLANIF interface can be configured for the super-VLAN and an IP address can be assigned to the VLANIF interface.

Context

NOTE:

Before configuring a super-VLAN, ensure that sub-VLANs have been configured.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run vlan vlan-id

    A VLAN is created, and the VLAN view is displayed.

    The VLAN ID of a super-VLAN must be different from every sub-VLAN ID.

  3. Run aggregate-vlan

    A super-VLAN is created.

    Using the undo aggregate-vlan command in the VLAN view changes a super-VLAN to a sub-VLAN.

  4. Run access-vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

    A sub-VLAN is added to a super-VLAN.

    Only sub-VLANs can be added to a super-VLAN. Before adding sub-VLANs to a super-VLAN in batches, ensure that these sub-VLANs are not configured with VLANIF interfaces.

  5. Run commit

    The configuration is committed.

Assigning an IP Address to the VLANIF Interface of a Super-VLAN

The IP address of the VLANIF interface of a super-VLAN must contain the subnet segments where users in sub-VLANs reside. All the sub-VLANs use the IP address of the VLANIF interface of the super-VLAN, thus saving IP addresses.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface vlanif vlan-id

    A VLANIF interface is created for a super-VLAN, and the view of the VLANIF interface is displayed.

  3. Run ip address ip-address { mask | mask-length } [ sub ]

    An IP address is assigned to the VLANIF interface.

  4. Run commit

    The configuration is committed.

(Optional) Configuring an IP Address Pool for a Sub-VLAN

Specifying an IP address range for users in a sub-VLAN filters out invalid users of which IP addresses are beyond the range.

Context

After configuring an IP address pool for a sub-VLAN, note the following points:
  • The sub-VLAN processes only packets carrying IP addresses in this address pool, such as ARP Request, ARP Reply, Proxy ARP, and ARP Miss packets.

  • If the super VLAN is enabled with proxy ARP, the system directly sends an ARP Request packet from a user in the sub-VLAN to the sub-VLAN based on the IP address carried in the packet. This reduces broadcast traffic.

  • When sending an ARP Miss packet carrying the IP address in the address pool, the system directly broadcasts the packet in the sub-VLAN to ensure that traffic is properly forwarded.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run vlan vlan-id

    The view of a created sub-VLAN is displayed.

  3. Run ip pool start-address [ to end-address ]

    An IP address pool is configured for the sub-VLAN.

  4. Run commit

    The configuration is committed.

(Optional) Enabling Proxy ARP on the VLANIF Interface of a Super-VLAN

PCs in different sub-VLANs cannot directly communicate with each other in Layer2 network. To allow these PCs to communicate with each other at Layer 3, enable proxy ARP on the VLANIF interface of the super-VLAN.

Context

VLAN aggregation allows sub-VLANs to use the same subnet address, but prevents PCs in different sub-VLANs from communicating with each other at the network layer.

PCs in ordinary VLANs can communicate with each other at the network layer by using different gateway addresses. In VLAN aggregation, PCs in a super-VLAN use the same subnet address and gateway address. As PCs in different sub-VLANs belong to one subnet, they communicate with each other only at Layer 2, not Layer 3. These PCs are isolated from each other at Layer 2. Consequently, PCs in different sub-VLANs cannot communicate with each other.

Proxy ARP is required to enable PCs in a sub-VLAN to communicate with PCs in another sub-VLAN or PCs on other networks. After a super-VLAN and its VLANIF interface are created, proxy ARP must be enabled to allow the super-VLAN to forward or process ARP request and reply packets. Proxy ARP helps PCs in sub-VLANs communicate with each other at the network layer.

NOTE:

An IP address must have been assigned to the VLANIF interface corresponding to the super-VLAN. Otherwise, proxy ARP cannot take effect.

VLAN aggregation simplifies configurations for the network where many VLANs are configured and PCs in different VLANs need to communicate with each other.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface vlanif vlan-id

    The view of the VLANIF interface of the super-VLAN is displayed.

  3. Run arp-proxy inter-sub-vlan-proxy enable

    Inter-sub-VLAN proxy ARP is enabled.

  4. Run commit

    The configuration is committed.

Verifying the VLAN Aggregation Configuration

After VLAN aggregation is configured, you can view VLAN types and information about VLANIF interfaces, such as the physical status, link protocol status, IP address, and mask.

Prerequisites

The VLAN aggregation configurations are complete.

Procedure

  • Run the display vlan [ vlan-id [ verbose ] ] command to check VLAN information.
  • Run the display interface vlanif [ vlan-id ] command to check information about a specific VLANIF interface.

Example

Run the display vlan verbose command. The command output shows the VLAN type. For example:

<HUAWEI> display vlan 40 verbose
 VLAN ID      : 20
  VLAN Type    : Super
  Description  : VLAN 0020
  Status       : Enable
  Broadcast    : Enable
  MAC Learning : Enable
  Statistics   : Disable
----------------
sub-VLAN List: 10        

Run the display interface vlanif command. The command output shows the physical status, link protocol status, IP address, and mask of a VLANIF interface. For example:

<HUAWEI> display interface vlanif 2
Vlanif2 current state : UP (ifindex: 22)
Line protocol current state : UP
Last line protocol up time : 2013-08-07 07:28:59
Description:
Route Port,The Maximum Transmit Unit is 1500
Internet Address is 10.1.1.2/24
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 38ba-23f8-7303
Physical is VLANIF
Current system time: 2013-08-08 07:30:27
    Last 300 seconds input rate 941 bits/sec, 2 packets/sec
    Last 300 seconds output rate 968 bits/sec, 3 packets/sec
    Input: 827 packets,0 bytes
           410 unicast,417 broadcast,0 multicast
           0 errors,0 drops
    Output:819 packets,0 bytes
           402 unicast,417 broadcast,0 multicast
           0 errors,0 drops
    Last 300 seconds input utility rate:  --
    Last 300 seconds output utility rate: --
Translation
Download
Updated: 2019-01-04

Document ID: EDOC1100059440

Views: 35717

Downloads: 27

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next