Configuring Isolate-User-Vlan; Configuring Primary Isolate-User-Vlan - HP A5830 Configuration Manual

Configuring isolate-user-VLAN

An isolate-user-VLAN uses a two-tier VLAN structure. In this approach, the following types of VLANs,
isolate-user-VLAN and secondary VLAN, are configured on the same device.
The following are the characteristics of the isolate-user-VLAN implementation:
Isolate-user-VLANs are used mainly for upstream data exchange. An isolate-user-VLAN can be

associated with multiple secondary VLANs. Because the upstream device identifies only the isolate-
user-VLAN and not the secondary VLANs, network configuration is simplified and VLAN resources
are saved.
isolate the Layer 2 traffic of different users by assigning the ports connected to them to different

secondary VLANs.
After a secondary VLAN is associated with an isolate-user-VLAN, the source MAC address entries

learned in the secondary VLAN are automatically learned by the isolate-user-VLAN, and traffic of
the secondary VLAN is forwarded within the isolate-user-VLAN.
As shown in
VLAN. VLANs 2, 5, and 8 are secondary VLANs associated with VLAN 10 and are invisible to Switch A.
Figure 41 An isolate-user-VLAN example
VLAN 2

Configuring primary isolate-user-VLAN

Configure the isolate-user-VLAN through the following steps:
Configure the isolate-user-VLAN.
1.
Assign ports to the isolate-user-VLAN and configure these ports as upstream ports.

To enable users in the isolate-user-VLAN to communicate with other networks at Layer 3,

configure VLAN interfaces for the isolate-user-VLAN and the secondary VLANs, and configure
the gateway IP address for the isolate-user-VLAN interface (you do not need to configure IP
addresses for the secondary VLAN interfaces).
Configure the secondary VLANs.
2.
Assign ports to each secondary VLAN and configure these ports as downstream ports.

Figure 41, the isolate-user-VLAN function is enabled on Switch B. VLAN 10 is the isolate-user-
Switch A
VLAN 10
Switch B
VLAN 5 VLAN 8
128