VLAN partitioning on Huawei core switch S673

VLAN partitioning on a Huawei S673 involves creating VLANs, assigning interfaces, and configuring PVIDs to isolate Layer 2 traffic and manage broadcast domains.Overview of VLANsVLANs (Virtual Local Area Networks) divide a physical LAN into multiple broadcast domains, improving network security and management. Hosts within the same VLAN can communicate directly, while communication between VLANs requires a router or Layer 3 device. VLAN IDs (VIDs) range from 1 to 4094, with 0 and 4095 reserved. Frames can be tagged (with a 4-byte VLAN tag) or untagged, and the switch processes them according to interface configuration and PVID settings .Interface TypesHuawei S673 supports four main interface types for VLAN configuration:Access Interface: Connects to end devices like PCs or servers. Typically carries traffic for a single VLAN and handles untagged frames by adding the interface's PVID .Trunk Interface: Connects switches or routers and carries traffic for multiple VLANs. Tagged frames are used to differentiate VLANs across the link .Hybrid Interface: Can carry both tagged and untagged frames, allowing more flexible VLAN membership for complex deployments .QinQ Interface: Used for VLAN stacking in service provider networks, allowing multiple VLAN tags per frame .VLAN Assignment MethodsInterface-based VLAN assignment: The simplest and most common method. Each interface is assigned a Port VLAN ID (PVID). Untagged frames arriving at the interface are tagged with the PVID and forwarded within the VLAN. This method is suitable for networks with fixed device locations .MAC-based VLAN assignment: VLAN membership is determined by the source MAC address of the frame. Useful when users frequently change physical locations, as VLAN configuration does not need to be updated .IP subnet or protocol-based VLAN assignment: VLANs can also be assigned based on IP addresses or specific protocols, providing more granular traffic segmentation .Configuration Steps on S673Enter system view:CodeCopysystem-view Create VLANs:CodeCopyvlan batch 10 20 30 This creates VLANs 10, 20, and 30 in a batch . 3. Assign interfaces to VLANs:For an access interface:CodeCopyinterface GigabitEthernet 0/0/1port link-type accessport default vlan 10 For a trunk interface:CodeCopyinterface GigabitEthernet 0/0/2port link-type trunkport trunk allow-pass vlan 10 20 30 For a hybrid interface:CodeCopyinterface GigabitEthernet 0/0/3port link-type hybridport hybrid vlan 10 untaggedport hybrid vlan 20 tagged Verify VLAN configuration:CodeCopydisplay vlandisplay interface GigabitEthernet 0/0/1 Best PracticesUse interface-based VLANs for simplicity and predictable traffic isolation.Ensure trunk links between switches allow all required VLANs to maintain communication across the network.Assign PVIDs carefully to handle untagged traffic correctly.Regularly monitor VLAN membership and traffic to prevent broadcast storms and ensure security . By following these steps, you can effectively partition your network on a Huawei S673 core switch, isolating traffic, improving security, and managing broadcast domains efficiently.