Muxvlan principle, Huawei MUX VLAN experimental configuration

What is? MUX-VLAN？

MUX VLAN, English full name Multiplex VLAN, It means multiple VLAN, Provide one in VLAN A mechanism for layer 2 traffic isolation between ports of .

MUX-VLAN classification

MUX VLAN It is divided into

• Lord VLAN
• from VLAN

from VLAN It is divided into

• Isolated slave VLAN
• Interworking type from VLAN

Lord VLAN（Principal VLAN）：Principal port You can talk to MUX VLAN Communicate with all interfaces in the .

Isolated slave VLAN（Separate VLAN）：Separate port And the only Principal port communicate , Completely isolated from other types of interfaces .

Each isolated type starts from VLAN A master must be bound VLAN.

Interworking type from VLAN（Group VLAN）：Group port You can talk to Principal port communicate , Interfaces in the same group can also communicate with each other , But it cannot interface with other groups or Separate port signal communication .

Each interworking slave VLAN A master must be bound VLAN.

Image from ：https://blog.csdn.net/qq_41959899/article/details/109682379

MUX-VLAN effect

1. It can be implemented in the same ip Different network segments vlan（ All from vlan And master vlan between ） Layer 2 interworking of users , It can also realize different from vlan The second layer of isolation between , And the same switch on the same switch vlan Two layer isolation between internal users , The same on different switches vlan Users in are not isolated .
2. Through this technology, it can be realized in many vlan While the user server shares , Isolation is the same vlan The purpose of different user hosts in .

MUX-VLAN Use scenarios

A simple example ：

Your company has a technical department 、 Business department 、 Sales Department 、 The financial department 、 The executive branch 、 Management Department , Then each department can communicate with each other , But there is no communication between departments , Your company has its own servers , The company's official website may be placed on the server 、OA System 、 Forum system, etc , The server is accessible to every department .

Then such requirements can be used MUX-VLAN To achieve , Each department can be added to the isolated type VLAN, And put every department Of employees join the interworking type from VLAN, The server joins the master VLAN.

MUX-VLAN Experimental configuration

MUX-VLAN The topology

MUX-VLAN To configure

<Huawei>sys

[Huawei]vlan batch 100 20 30 10

 Tips ： This operation may take a long time . One moment please … complete .

[Huawei]port-group group-member e0/0/2 to e0/0/4

[Huawei-port-group]port link-type access

[Huawei-Ethernet0/0/2]port link-type access

[Huawei-Ethernet0/0/3]port link-type access

[Huawei-Ethernet0/0/4]port link-type access

[Huawei-port-group]port default vlan 100

[Huawei-Ethernet0/0/2]port default vlan 100

[Huawei-Ethernet0/0/3]port default vlan 100

[Huawei-Ethernet0/0/4]port default vlan 100

[Huawei]port-group group-member e 0/0/5 to e0/0/6

[Huawei-port-group]port link-type access

[Huawei-Ethernet0/0/5]port link-type access

[Huawei-Ethernet0/0/6]port link-type access

[Huawei-port-group]port default vlan 10

[Huawei-Ethernet0/0/5]port default vlan 10

[Huawei-Ethernet0/0/6]port default vlan 10

[Huawei-port-group]q

[Huawei]int e0/0/20

[Huawei-Ethernet0/0/20]port link-type access

[Huawei-Ethernet0/0/20]port default vlan 20

[Huawei-Ethernet0/0/20]int e0/0/1

[Huawei-Ethernet0/0/1]port link-type access

[Huawei-Ethernet0/0/1]port default vlan 30

[Huawei-Ethernet0/0/1]q

[Huawei]vlan 30

[Huawei-vlan30]mux-vlan

[Huawei-vlan30]subordinate group 10 20

[Huawei-vlan30]subordinate separate 100

[Huawei]port-group group-member e0/0/1 to e0/0/22

[Huawei-port-group]port mux-vlan enable

[Huawei-Ethernet0/0/1]port mux-vlan enable

[Huawei-Ethernet0/0/2]port mux-vlan enable

[Huawei-Ethernet0/0/3]port mux-vlan enable

[Huawei-Ethernet0/0/4]port mux-vlan enable

[Huawei-Ethernet0/0/5]port mux-vlan enable

[Huawei-Ethernet0/0/6]port mux-vlan enable

[Huawei-port-group]q

<Huawei>save

You can refer to my experiment for configuration .