Digisol DG-GS4826S, Management Manual

Page: 948 / 1344

C
HAPTER
39 | VLAN Commands
Configuring Private VLANs
– 948 –
Ethernet 1/8
Console#
C
ONFIGURING
P
RIVATE
VLAN
S
Private VLANs provide port-based security and isolation of local ports
contained within different private VLAN groups. This switch supports two
types of private VLANs – primary and community groups. A primary VLAN
contains promiscuous ports that can communicate with all other ports in
the associated private VLAN groups, while a community (or secondary)
VLAN contains community ports that can only communicate with other
hosts within the community VLAN and with any of the promiscuous ports in
the associated primary VLAN. The promiscuous ports are designed to
provide open access to an external network such as the Internet, while the
community ports provide restricted access to local users.
Multiple primary VLANs can be configured on this switch, and multiple
community VLANs can be associated with each primary VLAN. (Note that
private VLANs and normal VLANs can exist simultaneously within the same
switch.)
This section describes commands used to configure private VLANs.
To configure private VLANs, follow these steps:
1. Use the private-vlan command to designate one or more community
VLANs and the primary VLAN that will channel traffic outside of the
community groups.
2.
Use the private vlan association command to map the community
VLAN(s) to the primary VLAN.
Table 111: Private VLAN Commands
Command Function Mode
Edit Private VLAN Groups
private-vlan Adds or deletes primary or community VLANs VC
private vlan association Associates a community VLAN with a primary VLAN VC
Configure Private VLAN Interfaces
switchport mode private-
vlan
Sets an interface to host mode or promiscuous mode IC
switchport private-vlan
host-association
Associates an interface with a secondary VLAN IC
switchport private-vlan
mapping
Maps an interface to a primary VLAN IC
Display Private VLAN Information
show vlan private-vlan Shows private VLAN information NE, PE