SMC Networks 6128PL2, Management Manual

Page: 547 / 664

VLAN Commands
4-239
4
private vlan association
Use this command to associate a primary VLAN with a secondary (i.e., community)
VLAN. Use the
no form to remove all associations for the specified primary VLAN.
Syntax
private-vlan primary-vlan-id association { secondary-vlan-id |
add secondary-vlan-id | remove secondary-vlan-id }
no private-vlan primary-vlan-id association
• primary-vlan-id - ID of primary VLAN. (Range: 1-4092, no leading zeroes).
• secondary-vlan-id - ID of secondary (i.e, community) VLAN.
(Range: 1-4092, no leading zeroes).
Default Setting
None
Command Mode
VLAN Configuration
Command Usage
Secondary VLANs provide security for group members. The associated
primary VLAN provides a common interface for access to other network
resources within the primary VLAN (e.g., servers configured with promiscuous
ports) and to resources outside of the primary VLAN (via promiscuous ports).
Example
switchport mode private-vlan
Use this command to set the private VLAN mode for an interface. Use the no form to
restore the default setting.
Syntax
switchport mode private-vlan { host | promiscuous }
no switchport mode private-vlan
• host – This port type can subsequently be assigned to a community or
isolated VLAN.
• promiscuous – This port type can communicate with all other promiscuous
ports in the same primary VLAN, as well as with all the ports in the
associated secondary VLANs.
Default Setting
Normal VLAN
Console(config-vlan)#private-vlan 2 association 3
Console(config)#