VLAN
H3C Low-End Ethernet Switches Configuration Examples
Chapter 2 Configuration Examples
2-8
to carry VLAN 500 and configure GigabitEthernet 1/1/1 to permit the frames of VLAN
500 to pass through with VLAN tags.
[Core-SwitchA] vlan 500
[Core-SwitchA-vlan500] quit
[Core-SwitchA] interface Vlan-interface 500
[Core-SwitchA-Vlan-interface500] ip address 192.168.50.1 24
[Core-SwitchA-Vlan-interface500] quit
[Core-SwitchA] interface GigabitEthernet 1/1/1
[Core-SwitchA-GigabitEthernet1/1/1] port trunk permit vlan 500
# Create a VLAN-interface on Core-Switch A to forward traffic of the R&D department to
the VPN and assign an IP address to the VLAN-interface. Assign Ethernet 1/0/20 to the
VLAN corresponding to the VLAN-interface. The configuration procedure is omitted
here.
z
Configuration on Core-Switch B
# Create VLAN 100, VLAN 200, VLAN 300, and VLAN 500 on Core-Switch B. The
configuration procedure is the same as that on Switch A.
# Configure GigabitEthernet 1/1/1 as a trunk port permitting the frames of VLAN 100,
VLAN 200, VLAN 300, and VLAN 500 to pass through with VLAN tags. The
configuration procedure is omitted here.
# Create a VLAN-interface on Core-Switch B to forward traffic of the marketing
department to the Internet and assign an IP address to the VLAN-interface. Assign
Ethernet 1/0/15 to the VLAN corresponding to the VLAN-interface. The configuration
procedure is omitted here.
# Configure GigabitEthernet 1/1/3 and GigabitEthernet 1/1/4 to permit only the frames
of VLAN 300 and only the frames of VLAN 100 to pass through respectively.
# Configure GigabitEthernet 1/1/2 to permit only the frames of VLAN 500 to pass
through.
# Assign IP address 192.168.40.1 to VLAN-interface 200. The configuration procedure
is omitted here.
III. Configuration remarks
After you finish the configuration, the hosts of the three departments should be isolated
at the data link layer.
As no VLAN interface is created for the VLAN of the marketing department on the VPN
gateway Core-Switch A, the hosts of the marketing department should not be able to
access the VPN or the R&D department through Layer 3 forwarding. Similarly, as no
VLAN interface is created for the VLAN of the R&D department on the Internet gateway
Core-Switch B, the hosts of the R&D department should not be able to access the
Internet or the marketing department through Layer 3 forwarding.
