SMC Networks 6724AL2, Management Manual

Page: 154 / 424

C
ONFIGURING THE
S
WITCH
2-122
CLI
– This example sets port 1 to accept only tagged frames, assigns
PVID 3 as the native VLAN ID, enables GVRP, sets the GARP timers,
and then sets the switchport mode to hybrid.
Private VLANs
Private VLANs provide port-based security and isolation between ports
within the assigned VLAN. This switch supports three types of private
VLAN ports: promiscuous, isolated, and community ports. A promiscuous
port can communicate with all interfaces within a private VLAN. An
isolated port can only communicate with promiscuous ports within its own
VLAN. Community ports can only communicate with other ports in their
own community VLAN, and with their designated promiscuous ports.
(Note that private VLANs and normal VLANs can exist simultaneously
within the same switch.)
Each private VLAN consists of three components: a primary VLAN, an
isolated VLAN, and one or more community VLANs. A primary VLAN
allows traffic to pass between promiscuous ports, and between
promiscuous ports and isolated or community ports subordinate to the
primary VLAN. An isolated VLAN allows traffic to pass only between
isolated ports and promiscuous ports, all other traffic between ports in the
VLAN is blocked. A community VLAN conveys traffic between
community ports, and from the community ports to their associated
promiscuous ports. Multiple primary VLANs can be configured on this
switch, and multiple community VLANs can be configured within each
primary VLAN. However, only one isolated VLAN can be associated with
each primary VLAN.
Console(config)#interface ethernet 1/1
Console(config-if)#switchport acceptable-frame-types tagged
3-125
Console(config-if)#switchport ingress-filtering 3-126
Console(config-if)#switchport native vlan 3 3-127
Console(config-if)#switchport gvrp 3-139
Console(config-if)#garp timer join 20 3-140
Console(config-if)#garp timer leave 90 3-140
Console(config-if)#garp timer leaveall 2000 3-140
Console(config-if)#switchport mode hybrid 3-124
Console(config-if)#