H3C LS-3100-52P-OVS-H3 Operation Manual - page 142
2-2
3) Assign non-trunk ports to the isolate-user-VLAN and ensure that at least one port takes the
isolate-user-VLAN as its default VLAN;
4) Assign non-trunk ports to each secondary VLAN and ensure that at least one port in a secondary
VLAN takes the secondary VLAN as its default VLAN;
5) Associate the isolate-user-VLAN with the specified secondary VLANs.
Follow these steps to configure an isolate-user-VLAN:
To do...
Use the command
Remarks
Enter system view
system-view
—
Create a VLAN and enter VLAN
view
vlan vlan-id
—
Configure the VLAN as an
isolate-user-VLAN
isolate-user-vlan enable
Required
Return to system view
quit
—
Access port
Refer to
Assigning an Access Port to a
VLAN
Assign ports to the
isolate-user-VLAN
and ensure that at
least one port
takes the
isolate-user-VLAN
as its default
VLAN
Hybrid port
Refer to
Assigning a Hybrid Port to a
VLAN
Use either approach.
Return to system view
quit
—
Create secondary VLANs
vlan { vlan-id1 [ to vlan-id2 ] | all }
Required
Quit to system view
quit
—
Access port
Refer to
Assigning an Access Port to a
VLAN
Assign ports to
each secondary
VLAN and
ensure that at
least one port in
a secondary
VLAN takes the
secondary VLAN
as its default
VLAN
Hybrid port
Refer to
Assigning a Hybrid Port to a
VLAN
Required to choose
either
Return to system view
quit
—
Associate the isolate-user-VLAN
with the specified secondary
VLANs
isolate-user-vlan isolate-user-vlan-id
secondary secondary-vlan-id [ to
secondary-vlan-id ]
Required
After associating an isolate-user-VLAN with the specified secondary VLANs, you cannot add/remove a
port to/from each involved VLAN or remove each involved VLAN. To do that, you must cancel the
association first.