(Optional) Configuring Isolation on the Access Side

Context

In a virtual extensible LAN (VXLAN), users connected to the same bridge domain (BD) can directly communicate with each other. To isolate users in a BD on the access side, configure the isolation function on the access side.

Only the S6730-S, S6730S-S, S5732-H, S5731-S, S5731S-S, S5731S-H, S6730-H, S6730S-H, S5731-H, S5720-HI, S5730-HI, and S6720-HI switches support this configuration.

Procedure

Run system-view
The system view is displayed.
Run bridge-domain bd-id
The BD view is displayed.
Run isolate enable
The isolation function in a BD on the access side is enabled.

By default, the isolation function in a BD on the access side is not configured.
Run quit
Return to the system view.
(Optional) When the user connected to a BD through a VLAN or a Layer 2 sub-interface needs to communicate with other users on the access side in the BD, configure the access-side mode of this VLAN or Layer 2 sub-interface to Hub.
- Configure the access-side mode of VLAN access to Hub.
  1. Run vlan vlan-id
    
    The VLAN view is displayed.
  2. Run hub-mode enable
    
    The access-side mode of the VLAN is set to hub.
- Configure the access-side mode of Layer 2 sub-interface access to Hub.
  1. Run interface interface-type interface-number.subinterface-number mode l2
    
    The Layer 2 sub-interface view is displayed.
  2. Run hub-mode enable
    
    The access-side mode of the Layer 2 sub-interface is set to hub.