VLANs on Huawei core switches can be configured by creating VLANs, assigning ports to VLANs, and selecting appropriate interface types such as access, trunk, or hybrid, with optional IP subnet-based VLAN assignment for advanced segmentation.

Overview of VLANs

VLANs (Virtual Local Area Networks) divide a physical LAN into multiple broadcast domains, improving network security, reducing broadcast traffic, and simplifying management . Hosts within the same VLAN can communicate directly, while communication between VLANs requires a router or Layer 3 switch. VLANs can be assigned based on interfaces, MAC addresses, or IP subnets .

Interface Types

Huawei switches support four main interface types for VLAN configuration :

• Access Interface: Connects end devices; carries traffic for a single VLAN.
• Trunk Interface: Connects switches; carries traffic for multiple VLANs using VLAN tags.
• Hybrid Interface: Can carry both tagged and untagged traffic; suitable for mixed environments.
• QinQ Interface: Supports VLAN stacking for service provider networks.

Basic VLAN Configuration Steps

1. Enter System View: Access the CLI via console, SSH, or Telnet and enter system view.
2. Create VLANs: Use the vlan <VLAN_ID> command to create VLANs individually or in batch. Optionally, add a description for clarity .
3. Configure Ports:
   • Set port type: port link-type access for end devices or port link-type trunk for inter-switch links.
   • Assign ports to VLANs: port default vlan <VLAN_ID> for access ports or port trunk allow-pass vlan <VLAN_LIST> for trunk ports .
4. Bind VLAN Interfaces (Optional): Assign an IP address to a VLAN interface for management or inter-VLAN routing:

   interface Vlanif1ip address 172.20.99.38 255.255.255.0ip route-static 0.0.0.0 0.0.0.0 172.20.99.1quit

5. Configure Interface Ranges: For multiple ports, use interface range GigabitEthernet 0/0/1 to 0/0/25 to apply VLAN settings simultaneously .

Advanced VLAN Assignment

• IP Subnet-Based VLANs: Map IP subnets to VLANs to automatically assign devices to VLANs based on their IP addresses. Enable this on hybrid interfaces and verify with display ip-subnet-vlan vlan all .
• MAC Address-Based VLANs: Assign VLANs based on device MAC addresses for mobility and security.
• Policy-Based VLANs: Use policies to dynamically assign VLANs based on protocols or user-defined rules .

Best Practices

• Use access ports for end devices and trunk ports for switch-to-switch links.
• Document VLAN IDs and port assignments to simplify management.
• Consider hybrid interfaces for ports connecting multiple VLANs or mixed devices.
• Regularly verify VLAN configuration using commands like display vlan and display interface brief. By following these steps, Huawei core switches can be effectively segmented into VLANs, improving network performance, security, and manageability .