Dell PowerConnect B-FCXs, Руководство по настройке

Страница: 536 / 1494

494 PowerConnect B-Series FCX Configuration Guide
53-1002266-01
Configuring private VLANs
13
•
An isolated VLAN must be associated with the primary VLAN for traffic from the isolated port to
be switched. An isolated VLAN is associated with only one primary VLAN and to the same
primary VLAN in the entire switched network.
•
An isolated port communicates only with the configured switch-switch link port if there are no
promiscuous ports configured for the isolated VLAN.
•
A primary VLAN is associated with only one isolated VLAN. An isolated VLAN can only be
mapped to a promiscuous port and a switch-switch link port that belong to the same primary
VLAN.
•
Link Aggregation Group (LAG) ports are not allowed as member ports of an isolated VLAN.
Community VLANs
•
A port being added to the community VLAN can be either a tagged port or an untagged port.
•
A member port of a community VLAN classifies a frame based on PVID only.
•
A community VLAN is associated with only one primary VLAN and to the same primary VLAN in
the entire switched network. A primary VLAN is associated with multiple community VLANs.
•
A community VLAN must be associated with the primary VLAN for traffic from the community
port to be switched.
•
LAG ports are not allowed as member ports of a community VLAN.
To configure a community PVLAN, enter commands such as the following.
PowerConnect(config)# vlan 901
PowerConnect(config-vlan-901)# untagged ethernet 3/5 to 3/6
PowerConnect(config-vlan-901)# pvlan type community
These commands create port-based VLAN 901, add ports 3/5 and 3/6 to the VLAN as untagged
ports, then specify that the VLAN is a community PVLAN.
Syntax: untagged ethernet [ <slotnum> /] <portnum> [to [ <slotnum> /] <portnum> | ethernet
[ <slotnum> /] <portnum> ]
or
Syntax: tagged ethernet [ <slotnum> /] <portnum> [to [ <slotnum> /] <portnum> | ethernet
[ <slotnum> /] <portnum> ]
Syntax: [no] pvlan type community | isolated | primary
The untagged ethernet or taggd ethernet command adds the ports to the VLAN.
The pvlan type command specifies that this port-based VLAN is a PVLAN and can be of the
following types:
•
community – Broadcasts and unknown unicasts received on community ports are sent to the
primary port and also are flooded to the other ports in the community VLAN.
•
isolated – Broadcasts and unknown unicasts received on isolated ports are sent only to the
primary port. They are not flooded to other ports in the isolated VLAN.
•
primary – The primary PVLAN ports are “promiscuous”. They can communicate with all the
isolated PVLAN ports and community PVLAN ports in the isolated and community VLANs that
are mapped to the promiscuous port.
Changing from one PVLAN type to another (for example, from primary to community or vice versa) is
allowed but the mapping will be removed.