126
Step Command
Remarks
2.
Enter interface
view or port
group view.
•
Enter Layer 2 Ethernet interface
view:
interface
interface-type
interface-number
•
Enter Layer 2 aggregate interface
view:
interface bridge-aggregation
interface-number
•
Enter port group view:
port-group manual
port-group-name
Use any command.
•
The configuration made in Ethernet
interface view applies only to the port.
•
The configuration made in port group
view applies to all ports in the port group.
•
The configuration made in Layer 2
aggregate interface view applies to the
aggregate interface and its aggregation
member ports. If the system fails to apply
the configuration to the aggregate
interface, it stops applying the
configuration to aggregation member
ports. If the system fails to apply the
configuration to an aggregation member
port, it skips the port and moves to the
next member port.
3.
Configure the
link type of the
ports as hybrid.
port link-type
hybrid
By default, all ports are access ports.
To change the link type of a port from trunk to
hybrid or vice versa, you must set the link
type to access first.
4.
Assign the
hybrid ports to
the specified
VLANs.
port hybrid
vlan
vlan-list
{
tagged
|
untagged
}
By default, a hybrid port allows only packets
of VLAN 1 to pass through untagged.
5.
Configure the
PVID of the
hybrid ports.
port hybrid pvid vlan
vlan-id
Optional.
By default, the PVID is VLAN 1.
NOTE:
•
Before you assign a hybrid port to a VLAN, create the VLAN.
•
After configuring the PVID for a hybrid port, you must use the
port hybrid vlan
command to configure
the hybrid port to allow packets from the PVID to pass through, so that the egress port can forward
packets from the PVID.
Port-based VLAN configuration example
Network requirements
As shown in
•
Host A and Host C belong to Department A, and access the enterprise network through different
devices. Host B and Host D belong to Department B. They also access the enterprise network
through different devices.
•
To ensure communication security and avoid broadcast storms, VLANs are configured in the
enterprise network to isolate Layer 2 traffic of different departments. VLAN 100 is assigned to
Department A, and VLAN 200 is assigned to Department B.
•
Make sure that hosts within the same VLAN can communicate with each other. Host A can
communicate with Host C, and Host B can communicate with Host D.
