vlan pool

Function

The vlan pool command creates a VLAN pool and displays the VLAN pool view, or displays the view of an existing VLAN pool.

The undo vlan pool command deletes a VLAN pool.

By default, no VLAN pool is created on a device.

Format

vlan pool pool-name

undo vlan pool pool-name

Parameters

Parameter	Description	Value
pool-name	Specifies the name of a VLAN pool.	The value is a string of 1 to 31 characters. It cannot contain question marks (?) or spaces, and cannot begin or end with double quotation marks (" ")

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A VLAN pool is a combination of multiple VLANs and is used to simplify network deployment. The administrator plans the VLANs of users in a department as a VLAN pool. After a user passes the authentication, the authentication server authorizes the VLAN pool to the user. The device allocates VLANs in the VLAN pool to users based on the VLAN assignment algorithm. In this way, VLANs can be planned for multiple departments without the need of calculating the number of users of each department.

On a WLAN, the access modes and access locations of wireless users are flexible. Users often connect to the same WLAN at a site such as the office entrance or stadium entrance, and then roam to WLANs covered by other APs. If each SSID has only one service VLAN to deliver wireless access to wireless users, IP address resources may become insufficient in areas where many wireless users access the WLAN, and IP addresses in the other areas are wasted. The VLAN pool can be configured as the service VLAN for wireless users so that one SSID can support multiple service VLANs simultaneously. New users are dynamically assigned to VLANs in the VLAN pool, which reduces the number of users in each VLAN and also the size of the broadcast domain. Additionally, IP addresses are evenly allocated, preventing IP address waste.

Follow-up Procedure

Run the vlan command to add VLANs to the VLAN pool.
Set the standard RADIUS attribute Tunnel-Private-Group-ID assigned to users who pass authentication by the RADIUS server so that wired users can be added to the specified VLAN pool.
For wireless users, three methods are available to apply a VLAN pool:
- Run the vap-profile profile-name wlan wlan-id radio { radio-id | all } service-vlan vlan-pool pool-name command to configure the specified VLAN pool as the service VLAN of wireless users in the specified VAP profile.
- Run the service-vlan vlan-pool pool-name command in the VAP profile view to configure the VLAN pool as the service VLAN of wireless users in the VAP profile.
- On the RADIUS server, configure the standard RADIUS attribute Tunnel-Private-Group-ID for authenticated users to add the users to the specified VLAN pool.

Precautions

After a VLAN pool is configured as a service VLAN for wireless users, the VLAN pool cannot be configured as the VLAN pool assigned to users who pass authentication by the RADIUS server.
After a VLAN pool is configured as a service VLAN for wireless users, VLANs in the VLAN pool cannot be deleted. To delete the VLAN pool, cancel the service VLAN configuration of the VLAN pool.
If a VLAN or the VLAN pool to which a VLAN belongs has been configured as a service VLAN for the WLAN network, the VLAN cannot be configured as a super-VLAN. Similarly, if a VLAN has been configured as a super-VLAN, the VLAN or the VLAN pool to which the VLAN belongs cannot be configured as a service VLAN for the WLAN network. In addition, if a VLAN pool has been configured as a service VLAN for a WLAN network, a super-VLAN cannot be added to the VLAN pool.
In scenarios where a dual-stack address pool is configured, a user successfully obtains an IP address if the VLAN pool has assigned an IPv4 or IPv6 address to it. In this case, the VLAN pool will not assign a new VLAN to this user.

Example

# Create the VLAN pool test and display the VLAN pool view.

<HUAWEI> system-view
[HUAWEI] vlan pool test
[HUAWEI-vlan-pool-test]