Ericsson ECN330, User Manual

Page: 875 / 1226

Command Line Interface
869
1553-KDU 137 365 Uen D 2006-06-16
To configure primary/secondary associated groups, follow these steps:
1. Use the
private-vlan
command (section 7.17.16 on page 870) to
designate the primary VLAN that will be used to channel traffic outside of
the isolated VLAN(s), and one or more isolated VLANs.
2. Use the
private-vlan association
command (section 7.17.17 on
page 871) to map the isolated VLAN(s) to a primary VLAN.
3. Use the
switchport mode private-vlan
command (section 7.17.18
on page 873) to configure one or more promiscuous port (that is, having
access to all ports in the primary VLAN and all ports in the associated
isolated VLANs), and one or more isolated ports.
Note that a promiscuous port can join a normal VLAN, but at most be
mapped to one primary VLAN. Because private VLAN ports can belong to
a normal VLAN and private VLAN concurrently, the native VLAN of a private
port will not automatically change to the private VLAN when executing the
switchport private-vlan mapping
or
switchport private-
vlan host-association
commands described in the following steps.
4. Use the
switchport private-vlan mapping
command (section
7.17.19 on page 874) to assign a promiscuous port to a primary VLAN.
5. Use the
switchport private-vlan host-association
command
(section 7.17.20 on page 875) to assign an isolated port to an isolated
VLAN.
6. Private VLANs can support tagged or untagged members. Use the
switchport allowed vlan
command (section 7.17.10 on page 861) to
specify tagged or untagged members.
7. Use the
show vlan private-vlan
command (section 7.17.21 on page
876) to verify the configuration settings.
switchport
private-vlan
host-association
Associates an interface with an isolated VLAN IC 875
Display Private VLAN Information
show vlan
private-vlan
Shows private VLAN information NE, PE 876
Command Function Mode Page