Edge-Core ECS4660-28F, Руководство по управлению, Страница: 1369 / 2020

C
HAPTER
40
| VLAN Commands
Configuring Private VLANs
– 1369 –
C
OMMAND
M
ODE
VLAN Configuration
C
OMMAND
U
SAGE
Secondary VLANs provide security for group members. The associated
primary VLAN provides a common interface for access to other network
resources within the primary VLAN (e.g., servers configured with
promiscuous ports) and to resources outside of the primary VLAN (via
promiscuous ports).
E
XAMPLE
Console(config-vlan)#private-vlan 2 association 3
Console(config)#
switchport mode
private-vlan
Use this command to set the private VLAN mode for an interface. Use the
no form to restore the default setting.
S
YNTAX
switchport mode private-vlan { host | promiscuous }
no switchport mode private-vlan
host – This port type can subsequently be assigned to a community
VLAN.
promiscuous – This port type can communicate with all other
promiscuous ports in the same primary VLAN, as well as with all the
ports in the associated secondary VLANs.
D
EFAULT
S
ETTING
Normal VLAN
C
OMMAND
M
ODE
Interface Configuration (Ethernet, Port Channel)
C
OMMAND
U
SAGE
To assign a promiscuous port to a primary VLAN, use the switchport
private-vlan mapping command. To assign a host port to a community
VLAN, use the switchport private-vlan host-association command.
E
XAMPLE
Console(config)#interface ethernet 1/2
Console(config-if)#switchport mode private-vlan promiscuous
Console(config-if)#exit
Console(config)#interface ethernet 1/3
Console(config-if)#switchport mode private-vlan host
Console(config-if)#