Port-based VLAN configuration example

As shown in Figure 16:

• Host A and Host C belong to Department A. VLAN 100 is assigned to Department A.

• Host B and Host D belong to Department B. VLAN 200 is assigned to Department B.

Configure port-based VLANs so that only hosts in the same department can communicate with each other.

Configuration procedure

1. Configure Device A:

   # Create VLAN 100, and assign GigabitEthernet 2/1/1 to VLAN 100.

   <DeviceA> system-view
   [DeviceA] vlan 100
   [DeviceA-vlan100] port gigabitethernet 2/1/1
   [DeviceA-vlan100] quit
   

   # Create VLAN 200, and assign GigabitEthernet 2/1/2 to VLAN 200.

   [DeviceA] vlan 200
   [DeviceA-vlan200] port gigabitethernet 2/1/2
   [DeviceA-vlan200] quit
   

   # Configure GigabitEthernet 2/1/3 as a trunk port, and assign the port to VLANs 100 and 200.

   [DeviceA] interface gigabitethernet 2/1/3
   [DeviceA-GigabitEthernet2/1/3] port link-type trunk
   [DeviceA-GigabitEthernet2/1/3] port trunk permit vlan 100 200
   Please wait... Done.
   

2. Configure Device B in the same way Device A is configured. (Details not shown.)

3. Configure hosts:

   1. Configure Host A and Host C to be on the same IP subnet. For example, 192.168.100.0/24.

   2. Configure Host B and Host D to be on the same IP subnet. For example, 192.168.200.0/24.

# Verify that Host A and Host C can ping each other, but they both fail to ping Host B and Host D. (Details not shown.)

# Verify that Host B and Host D can ping each other, but they both fail to ping Host A and Host C. (Details not shown.)

# Verify that VLANs 100 and 200 are correctly configured on Device A.

[DeviceA-GigabitEthernet2/1/3] display vlan 100
 VLAN ID: 100
 VLAN type: Static
 Route interface: Not configured
 Description: VLAN 0100
 Name: VLAN 0100
 Tagged ports:
    GigabitEthernet2/1/3
 Untagged ports:
    GigabitEthernet2/1/1
[DeviceA-GigabitEthernet2/1/3] display vlan 200
 VLAN ID: 200
 VLAN type: Static
 Route interface: Not configured
 Description: VLAN 0200
 Name: VLAN 0200
 Tagged ports:
    GigabitEthernet2/1/3
 Untagged ports:
    GigabitEthernet2/1/2