[H3C/华三]Super VLAN技术简述与配置

感觉会用到所以之后会记录比较多不同的vlan^^

本篇目录

1. Super VLAN概述
2. Super VLAN配置限制注意事项
3. Super VLAN配置步骤
4. Super VLAN显示和维护
5. Super VLAN典型配置过程示例

1. Super VLAN概述

Super VLAN（超级VLAN）是一种VLAN聚合技术，通过将一个Super VLAN和多个Sub VLAN关联，Sub VLAN公用Super VLAN接口的IP地址作为网关，实现三层通信，实现IP地址资源的优化利用。适合IP地址紧缺环境，大规模VLAN部署和用户隔离需求的场景使用。

2. Super VLAN配置限制注意事项

• Super VLAN不能与VXLAN IP网关功能组合使用
• MAC VLAN表项中的VLAN不能配置为Super VLAN
• Super VLAN不能作为Guest VLAN/Auth-Fail VLAN/Critical VLAN
• 一个VLAN不能同时配置为Super VLAN和Sub VLAN
• Super VLAN不支持二层组播和三层组播功能

3. Super VLAN配置步骤

flowchart TD A[创建 Sub VLAN] --> B[创建 Super VLAN 并关联 Sub VLAN] B --> C[配置Super VLAN接口] C --> D[将物理端口加入Sub VLAN]

创建Sub VLAN

# 进入系统视图
<H3C> system-view

[H3C] vlan 2
[H3C] vlan 3
[H3C] vlan 5
# 也可以一次性批量创建,batch可写可不写，低版本的华三不支持batch：
[H3C] vlan (batch) 2 3 5

创建Super VLAN及关联关系

# 创建Super VLAN
[H3C] vlan 10
# 配置VLAN类型为Super VLAN
[H3C-vlan10] supervlan

# 建立Super VLAN与Sub VLAN的映射关系
[H3C-vlan10] subvlan 2 3 5
[H3C-vlan10] quit

/*注：建立Super VLAN和Sub VLAN的映射关系前，
			指定的Sub VLAN必须已经创建*/

配置Super VLAN接口

# 创建Super VLAN接口（必须与Super VLAN ID相同）
[H3C] interface vlan-interface 10
# 配置IP地址(ipv6环境ip->ipv6)
[H3C-Vlan-interface10] ip address 10.1.1.1 255.255.255.0

# 开启本地代理功能
# IPv4环境
[H3C-Vlan-interface10] local-proxy-arp enable
# IPv6环境
[H3C-Vlan-interface10] local-proxy-nd enable
[H3C-Vlan-interface10] quit

将物理端口加入Sub VLAN

# 将端口GE 1/0/1与 1/0/2加入VLAN 2
[H3C] vlan 2
[H3C-vlan2] port gigabitethernet 1/0/1 gigabitethernet 1/0/2
[H3C-vlan2] quit

# 将端口GE 1/0/3与 1/0/4加入VLAN 3
[H3C] vlan 3
[H3C-vlan3] port gigabitethernet 1/0/3 gigabitethernet 1/0/4
[H3C-vlan3] quit

# 将端口GE 1/0/5与 1/0/6加入VLAN 5
[H3C] vlan 5
[H3C-vlan5] port gigabitethernet 1/0/5 gigabitethernet 1/0/6
[H3C-vlan5] quit

4. Super VLAN显示和维护

# 显示所有Super VLAN信息
<Device> display supervlan
# 显示指定Super VLAN的详细信息
<Device> display supervlan 10

显示示例

Super VLAN ID: 10
Sub-VLAN ID: 2-3 5

VLAN ID: 10
VLAN type: Static
It is a super VLAN.
Route interface: Configured
Ipv4 address: 10.1.1.1
Ipv4 subnet mask: 255.255.255.0

VLAN ID: 2
VLAN type: Static
It is a sub-VLAN.
Route interface: Configured
Ipv4 address: 10.1.1.1
Ipv4 subnet mask: 255.255.255.0
Untagged ports: GigabitEthernet1/0/1 GigabitEthernet1/0/2

5. Super VLAN典型配置过程示例

任务：DeviceA连接不同VLAN用户，所有用户均在10.1.1.0/24网段，要求实现Sub VLAN间二层隔离、三层互通节省IP资源。

<DeviceA> system-view

# 创建VLAN 10
[DeviceA] vlan 10
[DeviceA-vlan10] quit
[DeviceA] interface vlan-interface 10
# 配置 VLAN 接口的 IP 地址为 10.1.1.1/24
[DeviceA-Vlan-interface10] ip address 10.1.1.1 255.255.255.0
# 开启设备的本地代理 ARP 功能
[DeviceA-Vlan-interface10] local-proxy-arp enable
[DeviceA-Vlan-interface10] quit

# 创建Sub VLAN 2
[DeviceA] vlan 2
# 添加端口 GigabitEthernet1/0/1 和端口 GigabitEthernet1/0/2
[DeviceA-vlan2] port gigabitethernet 1/0/1 gigabitethernet 1/0/2
[DeviceA-vlan2] quit

[DeviceA] vlan 3
[DeviceA-vlan3] port gigabitethernet 1/0/3 gigabitethernet 1/0/4
[DeviceA-vlan3] quit

[DeviceA] vlan 5
[DeviceA-vlan5] port gigabitethernet 1/0/5 gigabitethernet 1/0/6
[DeviceA-vlan5] quit

# 配置 VLAN 10 为 Super VLAN
[DeviceA] vlan 10
[DeviceA-vlan10] supervlan
# 关联 Sub VLAN
[DeviceA-vlan10] subvlan 2 3 5
[DeviceA-vlan10] quit

配置验证
配置

-VLAN 2内主机IP: 10.1.1.10/24，网关: 10.1.1.1
-VLAN 3内主机IP: 10.1.1.20/24，网关: 10.1.1.1

测试互通性：VLAN 2主机应能ping通VLAN 3主机

# 查看Super VLAN配置信息
[DeviceA] display supervlan