Forgot password?
 Register now

How to configure super vlan? Reply
How to configure super vlan?
2236 6 2021-9-18 11:35:16

Confiure Supper Vlan

I. Networking Requirements

Core switch A serves as the user gateway and is connected to the access devices Switch B, Switch C, and Switch D through the Trunk ports. L2 network segmentation is implemented through VLAN setup for access users. All VLAN users share one IP gateway for L3 communication and Internet access.

II. Network Topology


III. Configuration Tips

1. On the access devices (Switch B, Switch C, and Switch D), configure only common VLANs (VLAN 10, VLAN 20, and VLAN 30 in this example).

2. On the user gateway device, create a Super VLAN and set the VLAN 10, VLAN 20, and VLAN30 of the access devices as sub VLANs.

3. Set the SVI port for the Super VLAN and specify IP address ranges for each sub VLAN.

IV. Configuration Steps

On the core server, perform the following steps:

1. Create VLAN 2, VLAN 10, VLAN 20, and VLAN 30.

Ruijie#configure terminal

Ruijie(config)#vlan 2


Ruijie(config)#vlan 10


Ruijie(config)#vlan 20


Ruijie(config)#vlan 30


2. Set VLAN 2 as the Super VLAN and VLAN 10, VLAN 20, and VLAN 30 as its sub VLANs.

Ruijie(config)#vlan 2

Ruijie(config-vlan)#supervlan  ----->configure Vlan2 as Super vlan

Ruijie(config-vlan)#subvlan 10,20,30   -----> SVI port could not be added to subvlan, need to execute command “no  interface vlan vlan-id”  to remove SVI port before adding to subvlan)


On a non-simplified network (gateway mode), Super VLAN broadcast packets are replicated to all its sub VLANs. Therefore, if a Super VLAN is configured with too many sub VLANs, the performance is undermined. Considering the packet forwarding performance, it is recommended that a Super VLAN is configured with no more than 200 sub VLANs.

3. Set the L3 virtual interface for the Super VLAN 2. The users of the sub VLANs of the Super VLAN 2 communicate through the configured interface.

Ruijie(config)#interface vlan 2    ----->configure svi interface

Ruijie(config-if-VLAN 2)#ip address

4. Set the IP address range of the sub VLAN 10 to to, that of sub VLAN 20 to to, and that of sub VLAN 30 to to

Ruijie(config)#vlan 10



Ruijie(config)#vlan 20



Ruijie(config)#vlan 30


5. Set the ports Gi 1/1, Gi 1/5, and Gi 1/9 as the Trunk ports for connecting Switch B, Switch C, and Switch D.

Ruijie(config)#interface range gigabitEthernet 1/1,1/5,1/9

Ruijie(config-if-range)#switchport mode trunk

6. Save the configurations.




1. By default, the Super VLAN agent APR function is enabled on the switch. In this case, users can access each other between sub VLANs. To prevent access between sub VLANs, disable the agent function of the Super VLAN.

Ruijie(config)#vlan 2

Ruijie(config-vlan)#no proxy-arp


2. In a DHCP environment, you do not have to specify the IP address range for a sub VLAN.

In this case, the IP addresses are randomly allocated within one sub VLAN. The VLAN of the port connecting the access switch determines the home sub VLAN of a PC.

Ruijie(config)#vlan 10


Ruijie(config-vlan)#vlan 20


Ruijie(config-vlan)#vlan 30


3. Disable broadcast storm prevention on the connecting port of the access switch.

When a user on another network segment accesses a user in the Super VLAN, if the user device does not exist, the switch sends ARP requests to all sub VLANs of the Super VLAN, as the Super VLAN does not obtain the ARP information during query when resolving the user device ARP before forwarding the IP packet to the designated user device. In this case, If the Super VLAN is configured with many sub VLANs, the Super VLAN has to send a large number of ARP packets.

In a DHCP environment, if there are too many sub VLANs in the Super VLAN, the number of broadcast packets sent on each sub VLAN is great as well, because the broadcast packet is replicated on each sub VLAN.

In this case, if the broadcast storm prevention function is enabled on corresponding port on the access switch, some broadcast packets, including DHCP packets or ARP packets, are discarded. To prevent this, you are recommended to disable the broadcast storm prevention function for the port on the access switch. For details, see Storm Control.

4. A Super VLAN is subject to the following restrictions:
a. A Super VLAN does not have physical interfaces as its direct member. A Super VLAN is configured with only sub VLANs and a sub VLAN contains physical interfaces.

b. A Super VLAN cannot be configured as a sub VLAN of another Super VLAN.

c. VLAN 1 cannot be configured as a Super VLAN.

d. A sub VLAN cannot be configured as a network interface and cannot be allocated with an IP address.

V. Verification

Check the Super VLAN.

Ruijie#show supervlan

supervlan id  supervlan arp-proxy  subvlan id  subvlan arp-proxy    subvlan ip range

------------  -------------------    -----------  -----------------------------------------------------

2                 ON10ON192.168.1.10 -

20ON192.168.1.60 -

                              30ON192.168.1.110 -

0 2022-3-16 21:35:10 View all replies
fupinadib@vinto replied at 2022-2-26 17:00
I've been trying to configure super vlan for as long as I can remember, but just can't seem to do so ...

Could you help describe the problem more detail?

1 2022-7-31 18:00:52 View all replies
You have brought up a very excellent details , thankyou for the post.
Roof repairs Woking

DELLA VELIUM replied at 2022-7-31 18:00
You have brought up a very excellent details , thankyou for the post.
Roof repairs Woking

A very awesome blog post. We are really grateful for your blog post. You will find a lot of approaches after visiting your post.

0 The day before yesterday 20:09 View all replies
The rattan weave differs somewhat for every single version, so you can be sure it will last for several years. Besides that, you can likewise utilize it in indoor spaces and put it in your living room.
outdoor patio conversation sets

Share this topic to


This site contains user submitted content, comments and opinions and is for informational purposes only. Ruijie may provide or recommend responses as a possible solution based on the information provided; every potential issue may involve several factors not detailed in the conversations captured in an electronic forum and Ruijie can therefore provide no guarantee as to the efficacy of any proposed solutions on the community forums. Ruijie disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Ruijie Community Terms of Use.

More ways to get help: Visit Support Videos, call us via Service Hotline, Facebook or Live Chat.

©2000-2022 Ruijie Networks Co,Ltd