Private VLANs (PVLAN)
The private VLAN (PVLAN) feature is supported on Dell Networking OS.
For syntax details about the commands described in this chapter, refer to the Private VLANs commands
chapter in the
Dell Networking OS Command Line Reference Guide
.
Private VLANs extend the Dell Networking OS security suite by providing Layer 2 isolation between ports
within the same virtual local area network (VLAN). A PVLAN partitions a traditional VLAN into subdomains
identified by a primary and secondary VLAN pair. Private VLANs block all traffic to isolated ports except traffic
from promiscuous ports. Traffic received from an isolated port is forwarded only to promiscuous ports or
trunk ports.
Example uses of PVLANs:
• A hotel can use an isolated VLAN in a PVLAN to provide Internet access for its guests, while stopping
direct access between the guest ports.
• A service provider can provide Layer 2 security for customers and use the IP addresses more efficiently,
by using a separate community VLAN per customer and at the same time using the same IP subnet
address space for all community and isolated VLANs mapped to the same primary VLAN.
• In more detail, community VLANs are especially useful in the service provider environment
because multiple customers are likely to maintain servers that must be strictly separated in
customer-specific groups. A set of servers owned by a customer could comprise a community
VLAN, so that those servers could communicate with each other, and would be isolated from other
customers. Another customer might have another set of servers in another community VLAN.
Another customer might want an isolated VLAN, which has one or more ports that are also isolated
from each other.
Topics:
•
•
Using the Private VLAN Commands
•
•
Private VLAN Configuration Example
•
Inspecting the Private VLAN Configuration
Private VLAN Concepts
Review the following PVLAN concepts before you create PVLANs on your system.
The VLAN types in a PVLAN include:
•
Community VLAN
— a type of secondary VLAN in a primary VLAN:
• Ports in a community VLAN can communicate with each other.
• Ports in a community VLAN can communicate with all promiscuous ports in the primary VLAN.
41
Private VLANs (PVLAN)
809
Содержание S4048T
Страница 1: ...Dell Configuration Guide for the S4048T ON System 9 10 0 1 ...
Страница 98: ... saveenv 7 Reload the system uBoot mode reset Management 98 ...
Страница 113: ...Total CFM Pkts 10303 CCM Pkts 0 LBM Pkts 0 LTM Pkts 3 LBR Pkts 0 LTR Pkts 0 802 1ag 113 ...
Страница 411: ...mode transit no disable Force10 Resilient Ring Protocol FRRP 411 ...
Страница 590: ...Figure 67 Inspecting the LAG Configuration Link Aggregation Control Protocol LACP 590 ...
Страница 591: ...Figure 68 Inspecting Configuration of LAG 10 on ALPHA Link Aggregation Control Protocol LACP 591 ...
Страница 594: ...Figure 70 Inspecting a LAG Port on BRAVO Using the show interface Command Link Aggregation Control Protocol LACP 594 ...
Страница 595: ...Figure 71 Inspecting LAG 10 Using the show interfaces port channel Command Link Aggregation Control Protocol LACP 595 ...
Страница 646: ...Figure 87 Configuring Interfaces for MSDP Multicast Source Discovery Protocol MSDP 646 ...
Страница 647: ...Figure 88 Configuring OSPF and BGP for MSDP Multicast Source Discovery Protocol MSDP 647 ...
Страница 648: ...Figure 89 Configuring PIM in Multiple Routing Domains Multicast Source Discovery Protocol MSDP 648 ...
Страница 653: ...Figure 91 MSDP Default Peer Scenario 2 Multicast Source Discovery Protocol MSDP 653 ...
Страница 654: ...Figure 92 MSDP Default Peer Scenario 3 Multicast Source Discovery Protocol MSDP 654 ...
Страница 955: ...Figure 119 Single and Double Tag First byte TPID Match Service Provider Bridging 955 ...
Страница 1179: ...Figure 147 Create Hypervisor Figure 148 Edit Hypervisor Figure 149 Create Transport Connector Virtual Extensible LAN VXLAN 1179 ...