Port-based VLAN configuration example

Network requirements

As shown in Figure 42:

Configure port-based VLANs so that only hosts in the same department can communicate with each other.

Figure 42: Network diagram

Configuration procedure

  1. Configure Device A:

    # Create VLAN 100, and assign Ten-GigabitEthernet 1/0/1 to VLAN 100.

    <DeviceA> system-view
    [DeviceA] vlan 100
    [DeviceA-vlan100] port ten-gigabitethernet 1/0/1
    [DeviceA-vlan100] quit
    

    # Create VLAN 200, and assign Ten-GigabitEthernet 1/0/2 to VLAN 200.

    [DeviceA] vlan 200
    [DeviceA-vlan200] port ten-gigabitethernet 1/0/2
    [DeviceA-vlan200] quit
    

    # Configure Ten-GigabitEthernet 1/0/3 as a trunk port to forward packets from VLANs 100 and 200 to Device B.

    [DeviceA] interface ten-gigabitethernet 1/0/3
    [DeviceA-Ten-GigabitEthernet1/0/3] port link-type trunk
    [DeviceA-Ten-GigabitEthernet1/0/3] port trunk permit vlan 100 200
    Please wait... Done.
    
  2. Configure Device B in the same way Device A is configured. (Details not shown.)

  3. Configure hosts:

    • Configure Host A and Host C to be on the same IP subnet. For example, 192.168.100.0/24.

    • Configure Host B and Host D to be on the same IP subnet. For example, 192.168.200.0/24.

Verifying the configuration

# Verify that Host A and Host C can ping each other, but they both fail to ping Host B. (Details not shown.)

# Verify that Host B and Host D can ping each other, but they both fail to ping Host A. (Details not shown.)

# Verify that VLANs 100 and 200 are correctly configured on devices, for example, on Device A.

[DeviceA-Ten-GigabitEthernet1/0/3] display vlan 100
 VLAN ID: 100
 VLAN type: Static
 Route interface: Not configured
 Description: VLAN 0100
 Name: VLAN 0100
 Tagged ports:
    Ten-GigabitEthernet1/0/3
 Untagged ports:
    Ten-GigabitEthernet1/0/1
[DeviceA-Ten-GigabitEthernet1/0/3] display vlan 200
 VLAN ID: 200
 VLAN type: Static
 Route interface: Not configured
 Description: VLAN 0200
 Name: VLAN 0200
 Tagged ports:
    Ten-GigabitEthernet1/0/3
 Untagged ports:
    Ten-GigabitEthernet1/0/2