VLAN Division of Huawei Core Switches

VLAN partitioning on Huawei core switches isolates broadcast domains, enhances security, and allows flexible network segmentation.

Overview of VLA

N PartitioningVLANs (Virtual Local Area Networks) divide a physical LAN into multiple broadcast domains, ensuring that devices in one VLAN cannot directly communicate with devices in another VLAN without routing. This improves network performance, security, and manageability on Huawei core switches such as the CloudEngine 12800 series or S5700/S6720 series.

VLAN Assignment Methods

Huawei switches support several VLAN assignment modes: Interface-based VLANs: Each port is assigned a PVID (Port VLAN ID). Untagged frames arriving at the port are tagged with the PVID and forwarded within that VLAN. This is simple and effective for fixed-location devices.

MAC-based VLANs: VLAN membership is determined by the source MAC address. This allows users to move physically without reconfiguring VLANs, suitable for mobile devices. IP-based VLANs: VLANs are assigned based on source IP addresses and subnet masks, useful for policy-based segmentation.

Protocol-based VLA

Ns: VLANs can also be assigned according to specific protocols or policies for advanced traffic management.

Configuring VLA

Ns on Huawei Core SwitchesCreate VLANs: Enter system view and create VLANs individually or in batch. Optionally, add descriptions for clarity. CodeCopysystem-viewvlan batch 10 20 30description "VLAN 10 - Sales, VLAN 20 - IT, VLAN 30 - Management" Assign Ports to VLANs: Configure ports as access, trunk, or hybrid depending on the devices connected.

Access ports are for end devices, trunk ports carry multiple VLANs, and hybrid ports can handle both tagged and untagged traffic.

Code

Copyinterface Gigabit

Ethernet 1/0/1port link-type accessport default vlan 10 For multiple ports: CodeCopyinterface range GigabitEthernet 1/0/2 to 1/0/10port link-type accessport default vlan 20 Configure VLAN Interfaces (SVIs): Assign IP addresses to VLAN interfaces for inter-VLAN routing and management.

Code

Copyinterface Vlanif10ip address 192. 168. 10.

1 255. 255. 255.

0 Inter-VLAN Communication: Enable routing between VLANs using Layer 3 interfaces or VRRP/OSPF for redundancy and high availability.

Advanced VLA

N Features: MUX VLAN: Allows multiple VLANs to share a single uplink while maintaining isolation.mVLAN: Integrates management and data VLANs for simplified administration. Transparent Protocol Transmission: Ensures efficient forwarding of protocol packets across VLANs.

Best Practices

Limit VLA

N size to reduce broadcast traffic and improve performance. Use trunk ports for uplinks between core and distribution switches. Apply security policies to restrict VLAN access and prevent unauthorized communication.

Document VLAN I

Ds, port assignments, and IP addressing for easier maintenance. Regularly monitor VLAN traffic and adjust configurations as network requirements evolve. By following these steps, Huawei core switches can be effectively partitioned into VLANs, providing scalable, secure, and manageable network segmentation for enterprise environments.