vlan划分方式

<Huawei>system-view
[Huawei]vlan batch 10 20
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type access
[Huawei-GigabitEthernet0/0/1]port default vlan 10
[Huawei]interface GigabitEthernet 0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 20

• 在没有给vlan配置ip的情况下, 可以将某一个指定的mac划分为一个vlan, 从而达到禁止访问这台电脑的目的

<Huawei>system-view
[Huawei]vlan 10
[Huawei-vlan10]mac-vlan mac-address 5489-98B1-77B2
[Huawei-vlan10]mac-vlan mac-address 5489-988D-53EF
[Huawei-vlan10]mac-vlan mac-address 5489-98D1-108E
[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]port hybrid untagged vlan 10
[Huawei]interface GigabitEthernet 0/0/2
[Huawei-GigabitEthernet0/0/2]port hybrid tagged vlan 10

• 指定的网络块化为一个vlan, 可以相互访问, 比如不同部门分配不同网段的ip地址, 使用同一个交换机

[SW1]vlan batch 10 20
[SW1]vlan 10
[SW1-vlan10]ip-subnet-vlan 1 ip 192.168.1.0 24
[SW1]vlan 20
[SW1-vlan20]ip-subnet-vlan 1 ip 192.168.2.0 24

 <Huawei> system-view
 [Huawei] sysname Switch1
 [Switch1] vlan batch 10 20
 [Switch1] vlan 10
 [Switch1-vlan10] protocol-vlan ipv4
 [Switch1-vlan10] quit
 [Switch1] vlan 20
 [Switch1-vlan20] protocol-vlan ipv6
 [Switch1-vlan20] quit
 [Switch1] interface Ethernet0/0/2
 [Switch1-Ethernet0/0/2] protocol-vlan vlan 10 all priority 5
 [Switch1-Ethernet0/0/2] quit
 [Switch1] interface Ethernet0/0/3
 [Switch1-Ethernet0/0/3] protocol-vlan vlan 20 all priority 6
 [Switch1-Ethernet0/0/3] quit

<Huawei> system-view
[Huawei] vlan batch 10 20
[Huawei] interface GigabitEthernet0/0/1
[Huawei-GigabitEthernet0/0/1] port link-type hybrid
[Huawei-GigabitEthernet0/0/1] port hybrid tagged vlan 10
[Huawei-GigabitEthernet0/0/1] port hybrid untagged vlan 20
[Huawei-GigabitEthernet0/0/1] traffic-filter group 10 inbound
[Huawei-GigabitEthernet0/0/1] quit