Korenix JetNet 5228G Series, Руководство пользователя

Страница: 239 / 658

VLAN Configuration
3-193
3
CLI – This example shows the switch configured with primary VLAN 5 and
secondary VLAN 6. Port 3 has been configured as a promiscuous port and mapped
to VLAN 5, while ports 4 and 5 have been configured as a host ports and associated
with VLAN 6. This means that traffic for port 4 and 5 can only pass through port 3.
Protocol VLANs
The network devices required to support multiple protocols cannot be easily grouped
into a common VLAN. This may require non-standard devices to pass traffic
between different VLANs in order to encompass all the devices participating in a
specific protocol. This kind of configuration deprives users of the basic benefits of
VLANs, including security and easy accessibility.
To avoid these problems, you can configure this switch with protocol-based VLANs
that divide the physical network into logical VLAN groups for each required protocol.
When a frame is received at a port, its VLAN membership can then be determined
based on the protocol type being used by the inbound packets.
Command Usage
To configure protocol-based VLANs, follow these steps:
1. First configure VLAN groups for the protocols you want to use (page 3-174).
Although not mandatory, we suggest configuring a separate VLAN for each
major protocol running on your network. Do not add port members at this time.
2. Create a protocol group for each of the protocols you want to assign to a VLAN
using the Protocol VLAN Configuration page.
3. Then map the protocol for each interface to the appropriate VLAN using the
Protocol VLAN Port Configuration page.
The following limitations apply to the use of Protocol VLANs:
• A maximum of 20 Protocol VLAN groups can be configured on the switch.
• One Protocol VLAN group can be configured for each of the predefined protocols
of IP, IPX, and Apple-talk (Special Protocol field).
• Up to 17 Protocol VLAN groups can be created where both the frame type and
protocol are user defined (Programmable Protocol). Protocol VLAN
groups created with the predefined protocols match all frame-types.
Console(config)#interface ethernet 1/3
Console(config-if)#switchport mode private-vlan promiscuous
4-240
Console(config-if)#switchport private-vlan mapping 5 4-242
Console(config-if)#exit
Console(config)#interface ethernet 1/4
Console(config-if)#switchport mode private-vlan host
4-240
Console(config-if)#switchport private-vlan host-association 6 4-241
Console(config-if)#exit
Console(config)#interface ethernet 1/5
Console(config-if)#switchport mode private-vlan host
Console(config-if)#switchport private-vlan host-association 6
Console(config-if)#