Got it
Huawei Enterprise Support Community
Community Forums Routing & Switching
VLAN Duplication on SW

VLAN Duplication on SW

Created: Oct 19, 2019 08:00:15Latest reply: Jul 23, 2021 06:22:26 1283 11 0 0 0
  Rewarded HiCoins： 0 (problem resolved)
View the author 1#

Hi Gents,


 My question is when we have multiple customers having same VLAN but different segments then how to handle it on one switch ..as vlan duplication on switch. Detailed picture is displayed below. Thanks!




VLAN duplicate

Like (0) Dislike (0) Favorite(0) Share Report
Previous: ether-trunk in router Ne40m2k
Next: Sx700 Switches
Featured Answers

Recommended answer

(0) (0)
Popeye_Wang
Admin Created Oct 21, 2019 01:17:51

Posted by LSA at 2019-10-20 19:53 @wissal thanks for the reply,,but my question is when we have multiple customers having same VLAN ...
To meet this requirement, you need to set different gateways for users on different network segments through the primary and secondary IP addresses on the Layer 3 interface.
For example：
interface vlanif 10
ip address 10.1.1.1 24
ip address 10.1.2.1 24 sub
View more
  • x
  • convention：
All Answers
(0) (0)
2#
ster
ster Created Oct 19, 2019 08:38:37

Hi friend
First, the network segment is the same, so the host will perform ARP query to find the MAC address of the destination address. At this time, the SW will first look at which ports and hosts belong to the same VLAN. If you forward the flood, the host will get the MAC address of the destination address. , so communication can be done, but Layer 3 cannot communicate because the router does not allow any of its two interfaces to be configured into the same network segment.
View more
  • x
  • convention：
(0) (0)
3#
wissal
wissal MVE Created Oct 19, 2019 09:57:46

Hello,

Multiplex VLAN (MUX VLAN) provides a mechanism to control network resources using VLANs. It can implement inter-VLAN communication and intra-VLAN isolation. The MUX VLAN is often used in enterprises and in hotels and residential buildings requiring broadband access. An enterprise, hotel, or residential building shares the same VLAN, but each department, room, or household is isolated.

MUX VLAN is configured on a Layer 2 switch, whereas super-VLAN technology is configured on a Layer 3 switch. MUX VLAN is more flexible in access control, but its configuration is complex.


Configuration Notes

  • The VLAN ID assigned to a principal VLAN cannot be used to configure the super-VLAN or sub-VLAN. Additionally, it is not recommended that this VLAN ID be used to configure VLAN mapping and VLAN stacking.
  • The VLAN ID assigned to a group or separate VLAN cannot be used to configure a VLANIF interface, super-VLAN, or sub-VLAN. Additionally, it is not recommended that this VLAN ID be used to configure VLAN mapping and VLAN stacking.
  • Disabling MAC address learning or limiting the number of learned MAC addresses on an interface affects the MUX VLAN function on the interface.
  • MUX VLAN and port security cannot be configured on the same interface simultaneously.
  • MUX VLAN and MAC address authentication cannot be configured on the same interface simultaneously.
  • MUX VLAN and 802.1x authentication cannot be configured on the same interface simultaneously.
  • If the MUX VLAN function is enabled on an interface, VLAN mapping and VLAN stacking cannot be configured on the interface.
  • This example applies to all versions of all switches.
You can find more details in the link below

Example for Configuring MUX VLAN to Isolate Users in the Same VLAN



Thanks
View more
  • x
  • convention：
(0) (0)
4#
LSA
LSA Created Oct 20, 2019 19:53:42

Posted by wissal at 2019-10-19 09:57 Hello,Multiplex VLAN (MUX VLAN) provides a mechanism to control network resources using VLANs. It ca ...
@wissal thanks for the reply,,but my question is when we have multiple customers having same VLAN but different network then to handle it ..& move uplink toward internet....
View more
  • x
  • convention：
(0) (0)
5#
wissal
wissal MVE Created Oct 20, 2019 20:11:35

Posted by LSA at 2019-10-20 12:53 @wissal thanks for the reply,,but my question is when we have multiple customers having same VLAN ...
Hello,

Please find below the solution for your issue

Configuring a Layer 3 Switch to Work with a Router for Internet Access

Layer 3 Switch

Layer 3 switches provide the routing function, which indicates a network-layer function in the OSI model.

Layer 3 switches can work at Layer 2 and Layer 3 and be deployed at the access layer or aggregation layer as user gateways.

Configuration Notes

  • This example uses router configurations of AR3600 V200R007C00SPCc00. For other router configurations, see the corresponding documentation.
  • For the products and versions applicable when a switch functions as a DHCP server, see Examples for Applicable Products and Versions.

Networking Requirements

In Figure 2-42, a company has multiple departments that belong to different network segments, and each department needs to access the Internet. It is required that users access the Internet through the Layer 3 switch and router and that the Layer 3 switch function as the gateway of users.

Figure 2-42  Configuring a Layer 3 switch to work with a router for Internet access
imgDownload?uuid=df097cc528ce4982aebb1a5

Configuration Roadmap

The configuration roadmap is as follows:

  1. Configure the switch as the gateway of users to allow users to communicate across network segments through VLANIF interfaces.

  2. Configure the switch as the DHCP server to assign IP addresses to users.

  3. Configure the NAT function on the router to enable intranet users to access the Internet.

For more details refer to the link

Thanks
View more
  • x
  • convention：
(0) (0)
6#
Popeye_Wang
Popeye_Wang Admin Created Oct 21, 2019 01:17:51

Posted by LSA at 2019-10-20 19:53 @wissal thanks for the reply,,but my question is when we have multiple customers having same VLAN ...
To meet this requirement, you need to set different gateways for users on different network segments through the primary and secondary IP addresses on the Layer 3 interface.
For example：
interface vlanif 10
ip address 10.1.1.1 24
ip address 10.1.2.1 24 sub
View more
  • x
  • convention：
(0) (0)
7#
chenhui
chenhui Admin Created Oct 21, 2019 02:16:09

Posted by ster at 2019-10-19 08:38 Hi friendFirst, the network segment is the same, so the host will perform ARP query to find the MAC ...
@LSA hello,
there are a few ways to isolate the same vlans from different users.
But I got a question that you described layer 3 interface for all vlan, does this mean the different user using the same gateway IP address? For example, vlan 10 users comes from customer 1 and vlan 10 users comes from customer 2 are both using gateway ip addess 10.1.1.1/24, and you are trying to isolate the communication between the vlan 10 users comes from the customer 1 and customer 2. Does this description matches your purpose?

Or if you are just curiosity about how the switch handle with the situation, I think the switch wouldn't have the different handling with the same vlan. for example, for vlan 10, though the administrator knows there are two customers using vlan 10, but for switch, it only recognizing the vlan tag, for both packets marked vlan tag 10, it will treat those packets same no matter those packets are in same network segment or not.
View more
  • x
  • convention：
(0) (0)
8#
LSA
LSA Created Oct 21, 2019 17:23:37

Dear thanks for answar,,,but if we have multiple customers using same Vlan but different network (subnets) then how we handle same tag of different gateway..As vlan duplicationn.......& how many sub interface we creat in vlanif......attached picture is for reference.Thanks

View more
  • x
  • convention：
(0) (0)
9#
LSA
LSA Created Oct 21, 2019 17:27:53

Posted by Popeye_Wang at 2019-10-21 01:17 To meet this requirement, you need to set different gateways for users on different network segmen ...
Thanks, Popeye...how many secondary IP addresses we creat in vlanif? means if we have more than 2 customer having the same VLAN with different network...then ?
View more
  • x
  • convention：
(0) (0)
10#
LSA
LSA Created Oct 21, 2019 17:31:43

Posted by Popeye_Wang at 2019-10-21 01:17 To meet this requirement, you need to set different gateways for users on different network segmen ...
013041l8tsyly4gtq438dp.png

You can check from this picture.

View more
  • x
  • convention：
12
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookies Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Contact Us: e_online@huawei.com Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.