Example for Configuring MUX VLAN on an Access Device

Networking Requirements

All users on an enterprise network are allowed to access the enterprise server. The enterprise allows communication between certain employees while prohibiting communication between others.

As shown in Figure 1, MUX VLAN can be configured on the Switch connecting to user hosts. MUX VLAN meets the enterprise's requirements, conserves VLAN resources, and has fewer requirements on network maintenance.

Figure 1 MUX VLAN networking

Configuration Roadmap

The configuration roadmap is as follows:

Configure a principal VLAN.
Configure a group VLAN.
Configure a separate VLAN.
Add ports to the VLANs and enable the MUX VLAN feature.

Procedure

Configure MUX VLAN.

# Create VLAN 2, VLAN 3, and VLAN 4.

<HUAWEI> system-view
[HUAWEI] sysname Switch
[Switch] vlan batch 2 3 4

# Configure a group VLAN and a separate VLAN.

[Switch] vlan 2
[Switch-vlan2] mux-vlan
[Switch-vlan2] subordinate group 3
[Switch-vlan2] subordinate separate 4
[Switch-vlan2] quit

# Add ports to the VLANs and enable the MUX VLAN feature on the ports.

[Switch] interface gigabitethernet 0/0/1
[Switch-GigabitEthernet0/0/1] port link-type access
[Switch-GigabitEthernet0/0/1] port default vlan 2
[Switch-GigabitEthernet0/0/1] port mux-vlan enable vlan 2
[Switch-GigabitEthernet0/0/1] quit
[Switch] interface gigabitethernet 0/0/2
[Switch-GigabitEthernet0/0/2] port link-type access
[Switch-GigabitEthernet0/0/2] port default vlan 3
[Switch-GigabitEthernet0/0/2] port mux-vlan enable vlan 3
[Switch-GigabitEthernet0/0/2] quit
[Switch] interface gigabitethernet 0/0/3
[Switch-GigabitEthernet0/0/3] port link-type access
[Switch-GigabitEthernet0/0/3] port default vlan 3
[Switch-GigabitEthernet0/0/3] port mux-vlan enable vlan 3
[Switch-GigabitEthernet0/0/3] quit
[Switch] interface gigabitethernet 0/0/4
[Switch-GigabitEthernet0/0/4] port link-type access
[Switch-GigabitEthernet0/0/4] port default vlan 4
[Switch-GigabitEthernet0/0/4] port mux-vlan enable vlan 4
[Switch-GigabitEthernet0/0/4] quit
[Switch] interface gigabitethernet 0/0/5
[Switch-GigabitEthernet0/0/5] port link-type access
[Switch-GigabitEthernet0/0/5] port default vlan 4
[Switch-GigabitEthernet0/0/5] port mux-vlan enable vlan 4
[Switch-GigabitEthernet0/0/5] quit

Verify the configuration.
The server, HostB, HostC, HostD, and HostE are on the same subnet.

The server can communicate with HostB, HostC, HostD, and HostE at Layer 2.

HostB can communicate with HostC at Layer 2.

HostD cannot communicate with HostE at Layer 2.

HostB and HostC cannot communicate with HostD and HostE at Layer 2.

Configuration Files

Switch configuration file

#
sysname Switch
#
vlan batch 2 to 4
#
vlan 2
 mux-vlan
 subordinate separate 4 
 subordinate group 3
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 2 
 port mux-vlan enable vlan 2
#
interface GigabitEthernet0/0/2
 port link-type access
 port default vlan 3
 port mux-vlan enable vlan 3
#
interface GigabitEthernet0/0/3
 port link-type access
 port default vlan 3
 port mux-vlan enable vlan 3
#
interface GigabitEthernet0/0/4
 port link-type access
 port default vlan 4
 port mux-vlan enable vlan 4
#
interface GigabitEthernet0/0/5
 port link-type access
 port default vlan 4
 port mux-vlan enable vlan 4
#
return