8.7 MUX VLAN

1.MUX-VLAN是用来对连接批量设备的访问控制功能。

1）在MUX-VLAN中定义主从VLAN

2）从VLAN分为组VLAN和隔离VLAN

2.相互访问规则

1）主VLAN可以访问从VLAN

2）组VLAN不能访问隔离VLAN

3）组VLAN内部可以互相访问 （组VLAN可以有多个）

4）隔离VLAN内部不能互相访问 (隔离VLAN只能有一个)

3.SW1配置MUX-VLAN，VLAN10是主VLAN，VLAN10是组VLAN，VLAN30是隔离VLAN

[SW1]vlan batch 10 20 30
[SW1]vlan 10
[SW1-vlan10]mux-vlan
[SW1-vlan10]subordinate group 20
[SW1-vlan10]subordinate separate 30

4.SW2配置MUX-VLAN，VLAN10是主VLAN，VLAN10是组VLAN，VLAN30是隔离VLAN

[SW2]vlan batch 10 20 30
[SW2-vlan10]mux-vlan
[SW2-vlan10]subordinate group 20   
[SW2-vlan10]subordinate separate 30

5.SW1的G0/0/1口划入VLAN10，并开启MUX VLAN功能

[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access 
[SW1-GigabitEthernet0/0/1]port default vlan 10
[SW1-GigabitEthernet0/0/1]port mux-vlan enable 

6.SW1的G0/0/2口划入VLAN20，并开启MUX VLAN功能

[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access 
[SW1-GigabitEthernet0/0/2]port default vlan 20
[SW1-GigabitEthernet0/0/2]port mux-vlan enable 

7.SW1的G0/0/3口划入VLAN30，并开启MUX VLAN功能

[SW1]interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3]port link-type access 
[SW1-GigabitEthernet0/0/3]port default vlan 30
[SW1-GigabitEthernet0/0/3]port mux-vlan enable 

8.SW2的G0/0/1口划入VLAN10，并开启MUX VLAN功能

[SW2]interface GigabitEthernet 0/0/1
[SW2-GigabitEthernet0/0/1]port link-type access 
[SW2-GigabitEthernet0/0/1]port default vlan 10
[SW2-GigabitEthernet0/0/1]port mux-vlan enable 

9.SW2的G0/0/2口划入VLAN30，并开启MUX VLAN功能

[SW2]interface GigabitEthernet 0/0/2
[SW2-GigabitEthernet0/0/2]port link-type access 
[SW2-GigabitEthernet0/0/2]port default vlan 30
[SW2-GigabitEthernet0/0/2]port mux-vlan enable 

10.SW1、SW2的G24口配置为trunk类型

[SW1]interface GigabitEthernet 0/0/24
[SW1-GigabitEthernet0/0/24]port trunk allow-pass vlan all 
[SW2]interface GigabitEthernet 0/0/24
[SW2-GigabitEthernet0/0/24]port trunk allow-pass vlan all 

11.查看MUX-VLAN信息

[SW1]display mux-vlan
Principal Subordinate Type         Interface  
10        -           principal    GigabitEthernet0/0/1
10        30          separate     GigabitEthernet0/0/3
10        20          group        GigabitEthernet0/0/2

[SW2]display mux-vlan
Principal Subordinate Type         Interface  
10        -           principal    GigabitEthernet0/0/1
10        30          separate     GigabitEthernet0/0/2
10        20          group