VLAN Principles

Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.

 Foreword
 A Virtual Local Area Network (VLAN) represents a form of administrative
network that defines a logical grouping of hosts or end system devices that
are not limited to a physical location, and may be defined based on a wide
range of parameters that allow for a greater flexibility in the way that
logical groups are defined. The application of VLAN technology has
expanded to support many aspects of enterprise networking as a means of
logical data flow management and isolation.

age 2 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Objectives
 Upon completion of this section, you will be able to:
 Explain the application of VLAN tagging.
 Describe the different port link types and characteristics.
 Successfully establish port based VLANs.

age 3 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 LAN Limitations

 No broadcast domain to manage expanding local networks.

age 4 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 VLAN Technology

Group 2
Group 1

 A VLAN enables logical isolation of traffic at the data link layer.

age 5 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 VLAN Frame Format
6 bytes 6 bytes 2 bytes 46-1500 bytes 4 bytes

DMAC SMAC Type Data FCS Untagged frame

6 bytes 6 bytes 2 bytes 46-1500 bytes 4 bytes

DMAC SMAC Tag Type Data FCS Tagged frame

0x8100 PCP DEI VLAN ID （ 12b ）

TPID TCI
2 bytes 2 bytes

 A VLAN tag is inserted to distinguish frames for each VLAN.

age 6 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Link Types

Trunk

Access

VLAN2 VLAN3

 A trunk represents a backbone for the transmission of VLAN traffic between switches.

age 7 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Port VLAN ID

PVID1 PVID1

PVID2 PVID3 PVID2 PVID3

 PVID represents the default VLAN for each interface.

 The PVID is set to VLAN 1 for all ports by default.

age 8 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Port Types – Access

10 Frame

PVID10 PVID10

PVID2 U
nt
d ag
g ge g ed
n ta
U

Host A Host B Host C

 Access ports remove VLAN tags before forwarding frames.

age 9 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Port Types – Trunk

SWA Untagged SWB

PVID10 PVID10

PVID10 PVID20 PVID10 PVID20

20 Frame

U
ed
ed

nt

nt
gg
ag

ag
gg

g
ta
ta

ed

ed
Un
Un

Host A Host B Host C Host D

 Frames carried over a trunk link may be tagged or untagged.

 All VLANs must be permitted before being carried over a trunk.

age 10 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Port Types – Hybrid

Hybrid Untagged
SWA 10 Frame SWB
Hybrid Tagged
PVID10 PVID10

PVID10 PVID20 PVID10 PVID20

20 Frame

U
ed

ed
nt

nt
gg

ag

ag
gg

U
ta

g
ta

nt
ed

ed
Un

Un

ag
g
ed
Host A Host B Host C Host D

 Hybrid ports are defined as either tagged or untagged.

 VLAN communication can be managed on a port by port basis.

age 11 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 VLAN Assignment Methods
SWA

Assignment
VLAN 5 VLAN 10
Method

1
2
0/

G0/0

G0
Port based G0/0/1, G0/0/7 G0/0/2 G0/0/9

/
G0/0
/
G0

0//
/

9
00-01-02-03-04-AA 00-01-02-03-04-BB

7
MAC based
00-01-02-03-04-CC 00-01-02-03-04-DD
IP Subnet
10.0.1.* 10.0.2.*
based
Protocol
IP IPX
based
10.0.1.* + G0/0/1+ 10.0.2.* + G0/0/2 +
Policy based
00-01-02-03-04-AA 00-01-02-03-04-BB
Host A Host B Host C Host D
10.0.1.1 10.0.2.1 10.0.1.2 10.0.2.2
 Five methods of VLAN assignment are possible.
 Port based VLAN assignment is the default assignment method.

age 12 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Creating VLANs
SWA SWB

Host A Host B Host C Host D

[SWA]vlan 10
[SWA-vlan10]quit
[SWA]vlan batch 2 to 3
Info: This operation may take a few seconds. Please wait for a
moment...done.

age 13 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 13
 Creating VLANs

[SWA]display vlan
The total number of vlans is : 4
------------------------------------------------------------
U:Up; D:Down; TG:Tagged; UT:Untagged; MP:Vlan-mapping;
ST:Vlan-stacking; #: ProtocolTransparent-vlan; *:Management-
vlan;
--------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------
1 common UT:GE0/0/1(U) ……
2 common
3 common
10 common
……

age 14 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Setting the Port Link Type
SWA SWB

G0/0/1

G0/0/5 G0/0/7

Host A Host B Host C Host D

[SWA]interface GigabitEthernet 0/0/1

[SWA-GigabitEthernet0/0/1]port link-type trunk
[SWA-GigabitEthernet0/0/1]quit
[SWA]interface GigabitEthernet 0/0/5
[SWA-GigabitEthernet0/0/5]port link-type access

age 15 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Assigning Ports to VLANs
SWA SWB

G0/0/1

G0/0/5 G0/0/7

Host A Host B Host C Host D

[SWA]vlan 2
[SWA-vlan2]port GigabitEthernet 0/0/7
[SWA-vlan2]quit
[SWA]interface GigabitEthernet 0/0/5
[SWA-GigabitEthernet0/0/5]port link-type access
[SWA-GigabitEthernet0/0/5]port default vlan 3

age 16 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Verifying VLAN Assignment

[SWA]display vlan
The total number of vlans is : 4
------------------------------------------------------------
U:Up; D:Down; TG:Tagged; UT:Untagged; MP:Vlan-mapping;
ST:Vlan-stacking; #: ProtocolTransparent-vlan; *:Management-
vlan;
--------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------
1 common UT:GE0/0/1(U) ……
2 common UT:GE0/0/7(D)
3 common UT:GE0/0/5(U)
10 common
……

age 17 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Forwarding Over the Trunk
SWA SWB

G0/0/1 G0/0/1

Host A Host B Host C Host D

[SWA-GigabitEthernet0/0/1]port link-type trunk

[SWA-GigabitEthernet0/0/1]port trunk pvid vlan 10
[SWA-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 3

age 18 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Forwarding Over the Trunk

[SWA]display vlan
The total number of vlans is : 4
------------------------------------------------------------
U:Up; D:Down; TG:Tagged; UT:Untagged; MP:Vlan-mapping;
ST:Vlan-stacking; #: ProtocolTransparent-vlan; *:Management-
vlan;
--------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------
1 common UT:GE0/0/1(U) ……
2 common UT:GE0/0/7(D) TG:GE0/0/1(U)
3 common UT:GE0/0/5(U) TG:GE0/0/1(U)
10 common
……

age 19 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Configuring Hybrid Ports
SWA SWB

G0/0/1 G0/0/1

G0/0/5 G0/0/7

Host A Host B Host C Host D

[SWA-GigabitEthernet0/0/5]port link-type hybrid

[SWA-GigabitEthernet0/0/5]port hybrid pvid vlan 3
[SWA-GigabitEthernet0/0/5]port hybrid untagged vlan 3

[SWA-GigabitEthernet0/0/7]port link-type hybrid

[SWA-GigabitEthernet0/0/7]port hybrid pvid vlan 2
[SWA-GigabitEthernet0/0/7]port hybrid untagged vlan 2

age 20 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Configuring Hybrid Ports
SWA SWB

G0/0/1 G0/0/1

G0/0/5 G0/0/7

Host A Host B Host C Host D

[SWA-GigabitEthernet0/0/1]port link-type hybrid

[SWA-GigabitEthernet0/0/1]port hybrid tagged vlan 2 to 3

 Trunk links using the hybrid port link-type must enable tagging of VLAN
frames before forwarding.

age 21 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Configuration Validation

[SWA]display vlan
The total number of vlans is : 4
------------------------------------------------------------
U:Up; D:Down; TG:Tagged; UT:Untagged; MP:Vlan-mapping; ST:Vlan-
stacking; #: ProtocolTransparent-vlan; *:Management-vlan;
--------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------
1 common UT:GE0/0/1(U) ……
2 common UT:GE0/0/7(D)
TG:GE0/0/1(U)
3 common UT:GE0/0/5(U)
TG:GE0/0/1(U)
10 common
……

age 22 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Configuring Hybrid Ports
SWA SWB

G0/0/1 G0/0/1

G0/0/5 G0/0/7 G0/0/4

Host A Host B Host C Host D

[SWB-GigabitEthernet0/0/4]port link-type hybrid

[SWB-GigabitEthernet0/0/4]port hybrid pvid vlan 3
[SWB-GigabitEthernet0/0/4]port hybrid untagged vlan 2 to 3

 Hybrid ports can be configured to receive VLAN traffic from multiple VLANs
by simply removing the tag at the port interface.

age 23 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Configuration Validation

[SWB]display vlan
The total number of vlans is : 3
------------------------------------------------------------
U:Up; D:Down; TG:Tagged; UT:Untagged; MP:Vlan-mapping; ST:Vlan-
stacking; #: ProtocolTransparent-vlan; *:Management-vlan;
--------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------
1 common UT:GE0/0/1(U) ……
2 common UT:GE0/0/4(U)
3 common UT:GE0/0/4(U)
4 ……

age 24 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Voice VLAN Application

SWA SWB

G0/0/1

Host A VoIP IPTV

MAC: 0011-2200-0001 MAC: 0011-2200-0002

 Voice VLANs are used to distinguish, isolate and prioritize voice traffic over
service traffic as a means of quality assurance.

age 25 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Voice VLAN Configuration
SWA SWB

G0/0/1

Host A VoIP IPTV

MAC: 0011-2200-0001 MAC: 0012-2400-0002

[SWB]vlan 2
[SWB-vlan2]interface GigabitEthernet 0/0/1
[SWB-GigabitEthernet0/0/1]voice-vlan 2 enable
[SWB-GigabitEthernet0/0/1]voice-vlan mode auto
[SWB-GigabitEthernet0/0/1]quit
[SWB]voice-vlan mac-address 0011-2200-0000 mask ffff-ff00-0000

age 26 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Configuration Validation

[SWB]display voice-vlan status

Voice VLAN Configurations:
-----------------------------------------------------------
Voice VLAN ID : 2
Voice VLAN status : Enable
Voice VLAN aging time : 1440(minutes)
Voice VLAN 8021p remark : 6
Voice VLAN dscp remark : 46
-----------------------------------------------------------
Port Information:
-----------------------------------------------------------
Port Add-Mode Security-Mode Legacy
-----------------------------------------------------------
GigabitEthernet0/0/1 Auto Security Disable

age 27 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Voice VLAN Configuration (new)
SWA SWB

G0/0/1

Host A VoIP IPTV

MAC: 0011-2200-0001 MAC: 0012-2400-0002

[SWB]interface GigabitEthernet 0/0/1

[SWB-GigabitEthernet0/0/1]port hybrid tagged vlan 2
[SWB-GigabitEthernet0/0/1] lldp tlv-enable med-tlv network-policy voice-vlan vlan 2
[SWB-GigabitEthernet0/0/1]quit

age 28 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
 Summary
 If a trunk link has a PVID of 5 and the command port trunk allow-pass vlan 2 3
is used, which VLAN traffic will be carried over the trunk?
 What action will be taken by an access port with a PVID of 2 when receiving an
untagged frame?

age 29 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
Thank You
www.huawei.com