H3C S5500-SI Series User manual

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 VLAN Configuration ....................................................................................................1-1
1.1 VLAN Overview..................................................................................................................1-1
1.1.1 Introduction to VLAN...............................................................................................1-1
1.1.2 VLAN Classification.................................................................................................1-2
1.2 Basic VLAN Configuration................................................................................................. 1-2
1.3 Basic VLAN Interface Configuration..................................................................................1-2
1.4 Port-Based VLAN Configuration........................................................................................1-3
1.4.1 Introduction of Port-Based VLAN............................................................................1-3
1.4.2 Configuring an Access Port-Based VLAN...............................................................1-5
1.4.3 Configuring a Trunk Port-Based VLAN...................................................................1-6
1.4.4 Configuring a Hybrid Port-Based VLAN..................................................................1-7
1.5 Displaying VLAN Configuration .........................................................................................1-8
1.6 VLAN Configuration Example............................................................................................1-9
1.6.1 Network Requirements............................................................................................1-9
1.6.2 Network Diagram.....................................................................................................1-9
1.6.3 Configuration Procedure.........................................................................................1-9
Chapter 2 Voice VLAN Configuration.......................................................................................... 2-1
2.1 Voice VLAN Overview .......................................................................................................2-1
2.1.1 Automatic and Manual Voice VLAN Modes............................................................2-1
2.1.2 Security and Ordinary Voice VLAN Modes............................................................. 2-4
2.2 Voice VLAN Configuration................................................................................................. 2-4
2.2.1 Configuration Prerequisites.....................................................................................2-4
2.2.2 Configuring Voice VLAN in Automatic Mode ..........................................................2-5
2.2.3 Configuring Voice VLAN in Manual Mode...............................................................2-6
2.3 Displaying Voice VLAN...................................................................................................... 2-7
2.4 Voice VLAN Configuration Example..................................................................................2-7
2.4.1 Voice VLAN Configuration Example (Automatic Mode)..........................................2-7
2.4.2 Voice VLAN Configuration Example (Manual Mode)..............................................2-9
Chapter 3 GVRP Configuration....................................................................................................3-1
3.1 Introduction to GARP......................................................................................................... 3-1
3.1.1 Introduction to GARP..............................................................................................3-1
3.1.2 Introduction to GVRP..............................................................................................3-3
3.1.3 Protocols and Standards......................................................................................... 3-4
3.2 Configuring GVRP.............................................................................................................3-4
3.2.1 Configuring GVRP...................................................................................................3-4
3.2.2 Setting GARP Timer................................................................................................3-5
3.3 Displaying and Maintaining GARP/GVRP.........................................................................3-6

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Table of Contents
ii
3.4 GVRP Configuration Example........................................................................................... 3-7
3.4.1 Example 1 ...............................................................................................................3-7
3.4.2 Example 2 ...............................................................................................................3-8
3.4.3 Example 3 ...............................................................................................................3-9

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Chapter 1 VLAN Configuration
1-1
Chapter 1 VLAN Configuration
1.1 VLAN Overview
1.1.1 Introduction to VLAN
The virtual local area network (VLAN) technology is developed for switches to control
broadcast operations in LANs.
By creating VLANs in a physical LAN, you can divide the LAN into multiple logical LANs,
each of which has a broadcast domain of its own. Hosts in the same VLAN
communicate with each other as if they are in a LAN. However, hosts in different VLANs
cannot communicate with each other directly. In this way, a broadcast frame is confined
within one VLAN, as shown in Figure 1-1.
VLAN A
VLAN B
VLAN A
VLAN B
VLAN A
VLAN B
LAN Switch
LAN Switch
Router
Figure 1-1 A VLAN implementation
A VLAN can span across multiple switches, or even routers. This enables hosts in a
VLAN to be dispersed in a more loose way. That is, hosts in a VLAN can belong to
different physical network segments.
VLAN enjoys the following advantages.
zBroadcasts are confined to VLANs. This decreases bandwidth utilization and
improves network performance.
zNetwork security is improved. Packets of different VLANs are isolated during
transmission. That is, hosts in different VLANs cannot communicate with each
other directly. To enable communications between different VLANs, network
devices operating on Layer 3 (such as routers or Layer 3 switches) are needed.

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Chapter 1 VLAN Configuration
1-2
zConfiguration workload is reduced. VLAN can be used to group specific hosts.
When the physical position of a host changes, no additional network configuration
is required if the host still belongs to the same VLAN.
1.1.2 VLAN Classification
Depending on how VLANs are established, VLANs fall into the following six categories:
zPort-based VLAN
zMAC-based VLAN
zProtocol-based VLAN
zIP sub network-based VLAN
zPolicy-based VLAN
zOther VLAN
H3C S5500-SI Series Ethernet Switch supports the port-based VLAN. This chapter will
focus on the port-based VLAN.
1.2 Basic VLAN Configuration
Table 1-1 Basic VLAN configuration
To do… Use the command… Remarks
Enter system view system-view —
Create VLANs in bulk vlan { vlan-id1 to
vlan-id2 | all } Optional
Create a VLAN and
enter VLAN view vlan vlan-id
Required
If the specified VLAN does not
exist, this command will first
create the VLAN, and then
enter VLAN view.
Specify the description
string of the VLAN description text
Optional
By default, the description
string of a VLAN is its VLAN
ID, such as “VLAN 0001”.
1.3 Basic VLAN Interface Configuration
VLAN interface is a virtual interface in Layer 3 mode, and mainly used in realizing the
Layer 3 connectivity between different VLANs.

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Chapter 1 VLAN Configuration
1-3
Table 1-2 Configure a VLAN interface
To do… Use the command… Remarks
Enter system view system-view —
Create a VLAN interface
and enter VLAN interface
view
interface vlan-interface
vlan-interface-id
Required
If the specified VLAN
interface does not exist,
this command will create
it first and then enter
VLAN interface view.
Configure IP address of
VLAN interface
ip address ip-address
{ mask |mask-length }
[ sub ]
Optional
By default, no IP address
is configured for a VLAN
interface
Specify the description
string for the current
VLAN interface description text
Optional
By default, the description
string of a VLAN interface
is the name of the VLAN
interface, such as
“Vlan-interface1
interface”.
Enable the VLAN
Interface undo shutdown
Optional
By default, if all the ports
under the VLAN interface
are down, the VLAN
interface is down; if one or
more ports under the
VLAN interface are up,
the VLAN interface is up.
Note:
Before creating a VLAN interface, the corresponding VLAN must exist. Otherwise, you
cannot create the VLAN interface successfully.
1.4 Port-Based VLAN Configuration
1.4.1 Introduction of Port-Based VLAN
Port-based VLAN is the simplest and most effective VLAN division method. It defines
its VLAN members according to the ports of a switch. After a specified port is added into
a specified VLAN, the port can forward the packets of the specified VLAN.

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Chapter 1 VLAN Configuration
1-4
I. Link Type of an Ethernet Port
Depending on how a port processes VLAN tags when it forwards packets, the link type
of the port can be one of the following three types:
zAccess. An access port belongs to only one VLAN; it strips VLAN tags when
sending the packets of the VLAN. An access port is generally used to connect a
user device.
zTrunk. A trunk port can belong to more than one VLAN and receives/sends the
packets of multiple VLANs; it is generally used to connect a switch.
zHybrid. A hybrid port can also belong to more than one VLAN and receives/sends
the packets of multiple VLANs; it is used to connect a switch or a user device.
The difference between the hybrid port and the trunk port is that:
zA hybrid port allows the packets from multiple VLANs to be sent without tags.
zA trunk port only allows the packets from the default VLAN to be sent without tags.
II. Default VLAN
You can configure a VLAN for a port. In additional, you can also configure a default
VLAN for the port. By default, the default VLAN of all the ports is VLAN 1. But you can
configure it as needed.
zThe default VLAN of an access port is the VLAN the access port belongs to and
cannot be configured.
zBoth of the trunk port and hybrid port allow multiple VLANs to pass through. You
can configure the default VLAN for them.
zAfter you delete the default VLAN of a port through the undo vlan command, for
an access port, its default VLAN restore to VLAN 1; for a trunk or a hybrid port, its
default VLAN configuration remain unchanged, that is, a trunk port or hybrid port
can use the presently nonexistent VLAN as the default VLAN.
Note:
For ports of a voice VLAN in automatic mode, you cannot configure the voice VLAN as
the default VLAN of the ports. If you do so, the system will prompt that you cannot
perform the configuration. For information about the voice VLAN, refer to Chapter 2
Voice VLAN Configuration.
The way by which a port processes incoming and outgoing packets depends on the link
type and default VLAN configured on it. Refer to the following table for details:

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Chapter 1 VLAN Configuration
1-5
Table 1-3 Incoming and outgoing packets
Incoming packet
Port type If no tag is
carried in the
packet
If a tag is carried in
the packet
Outgoing packet
Access
port
zReceive the packet
when the VLAN ID
(recorded in the
tag) is the same
with the default
VLAN ID.
zDrop the packet
when the VLAN ID
is different with the
default VLAN ID.
Remove the tag and send
the packet directly for the
VLAN ID is just the default
VLAN ID.
Trunk port
zWhen the VLAN ID is
the same with the
default VLAN ID,
remove the tag of the
packet first and then
send the packet.
zWhen the VLAN ID is
different with the
default VLAN ID but is
allowed on the port,
keep the original tag
and send the packet.
Hybrid
port
Encapsulate
the default
VLAN tag to the
packet
zReceive the packet
when the VLAN ID
(recorded in the
tag) is the same
with the default
VLAN ID.
zReceive the packet
when the VLAN ID
is different with the
default VLAN ID
but is allowed on
the port.
zDrop the packet
when the VLAN ID
is different with the
default ID and is
not allowed on the
port.
When the VLAN ID is
allowed on the port, send
the packet. You can
configure whether or not
to carry tags in the
outgoing packets of a
VLAN (including default
VLAN) through the port
hybrid vlan command.
1.4.2 Configuring an Access Port-Based VLAN
You can configure an access port-based VLAN in two ways: configure it in VLAN view,
or configure it in Ethernet port view/port group view.

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Chapter 1 VLAN Configuration
1-6
Table 1-4 Configure an access port-based VLAN (in VLAN view)
To do… Use the command… Remarks
Enter system view system-view —
Enter VLAN view vlan vlan-id
Required
If the specified VLAN
does not exist, this
command will create the
VLAN first and then enter
VLAN view of the VLAN.
Add an Ethernet port to a
specified VLAN port interface-list Required
By default, the system
adds all ports to VLAN 1.
Table 1-5 Configure an access port-based VLAN (in Ethernet port view or port group
view)
To do… Use the command… Remarks
Enter system view system-view —
Enter
Ethernet
port view
interface interface-type
interface-number
Enter
Ethernet
port view
or port
group
view Enter port
group view
port-group { manual
port-group-name |
aggregation agg-id }
Use either command
Configured in Ethernet
port view, the following
settings are effective on
the current port only;
configured in port group
view, the following
settings are effective on
all ports in the port group
Configure a port as an
access port port link-type access Optional
By default, a port is an
access port.
Add the current access
port to a specified VLAN port access vlan vlan-id Required
By default, all access
ports belong to VLAN 1.
Note:
You must add an access port to an existing VLAN.
1.4.3 Configuring a Trunk Port-Based VLAN
A trunk port allows multiple VLANs to pass, and you can configure it in Ethernet port
view/port group view.

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Chapter 1 VLAN Configuration
1-7
Table 1-6 Configure a trunk port-based VLAN
To do… Use the command… Remarks
Enter system view system-view —
Enter
Ethernet
port view
interface interface-type
interface-number
Enter
Ethernet
port view
or port
group view Enter port
group view
port-group { manual
port-group-name |
aggregation agg-id }
Use either command
Configured in Ethernet
port view, the following
settings are effective on
the current port only;
configured in port group
view, the following
settings are effective on
all ports in the port group
Configure a port as a
trunk port port link-type trunk Required
By default, the link type
of a port is access.
Add the current trunk
port to specified VLANs port trunk permit vlan
{ vlan-id-list | all }
Required
By default, all trunk ports
only allow the packets of
VLAN 1 to pass.
Set the default VLAN for
the trunk port port trunk pvid vlan
vlan-id
Optional
By default, the default
VLAN of the trunk port is
VLAN 1
Note:
zA trunk port and a hybrid port cannot switch to each other directly but must be
configured as an access port first. For example, a trunk port cannot be configured to
be a hybrid port directly; you must specify the trunk port as an access port first, and
then specify the access port as a hybrid port.
zThe default VLAN ID of the trunk port on the local switch must be the same as that of
the trunk port on the peer switch. Otherwise, the packets of the default VLAN cannot
be transmitted correctly from the local end to the peer end.
1.4.4 Configuring a Hybrid Port-Based VLAN
A hybrid port allows multiple VLANs to pass, and you can configure it in Ethernet port
view/port group view.

Operation Manual – VLAN
H3C S5500-SI Series Ethernet Switches Chapter 1 VLAN Configuration
1-8
Table 1-7 Configure a hybrid port-based VLAN
To do… Use the command… Remarks
Enter system view system-view —
Enter
Ethernet
port view
interface interface-type
interface-number
Enter
Ethernet
port view
or port
group
view
Enter port
group
view
port-group { manual
port-group-name |
aggregation agg-id }
Use either command
Configured in Ethernet port
view, the following settings
are effective on the current
port only; configured in port
group view, the following
settings are effective on all
ports in the port group
Configure a port as a
Hybrid port port link-type hybrid Required
By default, the link type of a
port is access.
Add the current hybrid
port to specified
VLANs
port hybrid vlan vlan-id-list
{ tagged | untagged }
Required
By default, all hybrid ports
only allow VLAN 1 packets
to pass.
Set the default VLAN
for the hybrid port. port hybrid pvid vlan
vlan-id
Optional
By default, the default
VLAN of the hybrid port is
VLAN 1
Note:
zA trunk port and a hybrid port cannot switch to each other directly but must be
configured as an access port first. For example, a trunk port cannot be configured to
be a hybrid port directly. You must specify the trunk port as an access port first, and
then specify the access port to a hybrid port.
zThe VLANs configured to be permitted to pass through a hybrid port must exist.
1.5 Displaying VLAN Configuration
After the above configuration, you can execute the display command in any view to
view the running of the VLAN configuration, and to verify the effect of the configuration.