VLAN

Control broadcast domain in Layer 2

◎ WWW.FIBERHOME.COM.CN
Vlan Configuration
☻ Create and Delete VLAN
S4800-28T-GF-PE(config)#vlan 3
S4800-28T-GF-PE(config)#no vlan 3
S4800-28T-GF-PE(config)#vlan 3 ， 4
☻ Check the vlan information

WWW.FIBERHOME.COM.CN
Vlan Configuration
☻ By default, the port mode is hybrid untagged mode ,we can add port to the vlan,
and assign it as tagged or untagged.
S4800-28T-GF-PE(config-ge1/1)#port hybrid vlan 3 untagged
S4800-28T-GF-PE(config-ge1/1)#port hybrid vlan 3 tagged
☻ Set the pvid for the hybrid port
S4800-28T-GF-PE(config-ge1/1)# port hybrid pvid 3
☻ There are two others port mode, access and trunk. We can use this command to
change the mode
S4800(config-ge1/1)#port link-type access //set the port to access
S4800(config-ge1/1)#port default vlan 2 //join the acess port to vlan 2

WWW.FIBERHOME.COM.CN
Vlan Configuration
☻ If we want to change the port mode to trunk, we must renew the
port to default configuration.
S4800(config-ge1/1)#port default vlan 1
S4800(config-ge1/1)#port link-type trunk
S4800(config-ge1/1)#port trunk allow-pass vlan 1-5
//the vlan 1-5 must have been created
S4800(config-ge1/1)#port trunk pvid <1-4094>

WWW.FIBERHOME.COM.CN
PVLAN
☻ If we want all the port can access the uplink port ,and the downlink port can’t
access each other, we can use port isolated.
under global configure mode:
S4800-28T-GF-PE(config)#port-isolation group 1
S4800-28T-GF-PE(config-isolate-group1)#add int gi 1/1

S4800-28T-GF-PE(config-isolate-group1)#add int gi 1/2

check the configuration
S4800-28T-GF-PE(config)#show port-isolate group

The interfaces in isolate group 1:

--------------------------------------------------------------------------------------

gigaethernet-1/1 gigaethernet-1/2

WWW.FIBERHOME.COM.CN
Experiment
Port 1,2,3 are all in the vlan 1 , and we don’t want PC1 communicaiting
with PC2,but they all can communicate witch PC3

1 3

2
PC1 PC3

PC2

WWW.FIBERHOME.COM.CN
Configuration
☻ S4800(config)#int gi 1/1 to gi 1/3
☻ S4800(config-ge1/1->ge1/3)#port hybrid vlan 1 untagged
☻ S4800(config-ge1/1->ge1/3)#q
☻ S4800(config)#port-isolation group 1
☻ S4800(config-isolate-group1)#add int gi 1/1

☻ S4800(config-isolate-group1)#add int gi 1/2

WWW.FIBERHOME.COM.CN
Q&A

WWW.FIBERHOME.COM.CN
 Thank you !

WWW.FIBERHOME.COM.CN