HP VPN Firewall Appliances Network Management Command Reference

65
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] port link-type trunk
# Configure Layer 2 aggregate interface Bridge-Aggregation 1 and its member ports as hybrid ports.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port link-type hybrid
port trunk permit vlan
Use port trunk permit vlan to assign the trunk ports to the specified VLANs.
Use undo port trunk permit vlan to remove the trunk ports from the specified VLANs.
Syntax
port trunk permit vlan { vlan-list | all }
undo port trunk permit vlan { vlan-list | all }
Default
A trunk port allows only packets from VLAN 1 to pass through.
Views
Ethernet interface view, Layer 2 aggregate interface view
Default command level
2: System level
Parameters
vlan-list: Specifies a list of VLANs that the trunk ports will be assigned to in the format of { vlan-id1 [ to
vlan-id2 ] }&<1-10>, where the value range for vlan-id1 and vlan-id2 is 1 to 4094, vlan-id2 must be no
smaller than vlan-id1, and &<1-10> indicates that you can specify up to 10 vlan-id1 [ to vlan-id2 ]
parameters. Make sure the specified VLANs already exist.
all: Permits all VLANs to pass through the trunk ports.
Usage guidelines
A trunk port can carry multiple VLANs. If you execute the port trunk permit vlan command multiple times,
the trunk port carries the set of VLANs specified by vlan-list in each execution.
On a trunk port, only traffic of the PVID can pass through untagged.
To prevent unauthorized VLAN users from accessing restricted resources, use the port trunk permit vlan
all command with caution.
The configuration made in Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports.
• If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
• If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.