port mux-vlan enable

Function

The port mux-vlan enable command enables the MUX VLAN function on an interface.

The undo port mux-vlan enable command disables the MUX VLAN function on an interface.

By default, the MUX VLAN function is disabled on an interface.

Format

port mux-vlan enable vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

undo port mux-vlan enable vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

undo port mux-vlan enable

Parameters

Parameter	Description	Value
vlan { vlan-id1 [ to vlan-id2 ] }	Enables MUX VLAN for specified VLANs.	The value is an integer ranging from 1 to 4094.

Views

Ethernet interface view, GE interface view, XGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, MultiGE interface view, VE interface view, Eth-Trunk interface view, port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The MUX VLAN function isolates Layer 2 traffic between interfaces in a VLAN. This function involves a MUX VLAN and several subordinate VLANs. Subordinate VLANs are classified into subordinate group VLANs and subordinate separate VLANs. Subordinate VLANs can communicate with the principal VLAN but cannot communicate with each other. Interfaces in a subordinate group VLAN can communicate with each other, and interfaces in a subordinate separate VLAN are isolated from each other.

The MUX VLAN function takes effect only after it is enabled on an interface.

Prerequisites

Before enabling the MUX VLAN function, ensure that the interface has been added to a principal or subordinate VLAN as an access, hybrid, or trunk interface.

Precautions

Disabling MAC address learning or limiting the number of learned MAC addresses on an interface affects the MUX VLAN function on the interface.
The MUX VLAN and port security functions conflict on an interface; therefore, the port mux-vlan enable and port-security enable commands are not advised to be used on the same interface.
The MUX VLAN and MAC address authentication conflict on an interface; therefore, the port mux-vlan enable and mac-authen commands are not advised to be used on the same interface.
The MUX VLAN and 802.1x authentication conflict on an interface; therefore, the port mux-vlan enable and dot1x enable commands are not advised to be used on the same interface.
You can create a VLANIF interface for a principal VLAN, but cannot create a VLANIF interface for a subordinate group VLAN or separate VLAN.
The port mux-vlan enable command is not supported on a negotiation-auto or negotiation-desirable port.
When the interface is enabled with MUX VLAN and configured with the PVID using the port trunk pvid vlan command, do not configure the PVID as the ID of the principal VLAN or subordinate VLAN of the MUX VLAN. For example, VLAN 10 is the principal VLAN, VLAN 11 is a subordinate group VLAN, and VLAN 12 is a subordinate separate VLAN. After the port mux-vlan enable vlan 10 command is used on the interface to enable MUX VLAN, do not run the port trunk pvid vlan command to set the PVID to VLAN 11 or VLAN 12.

Example

# Enable the MUX VLAN function in VLAN 2 on GE0/0/1.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] port link-type hybrid
[HUAWEI-GigabitEthernet0/0/1] port mux-vlan enable vlan 2