Brocade TurboIron 24X Series Configuration Guide - Manual (Page 448)

414 Brocade TurboIron 24X Series Configuration Guide
53-1003053-01
Configuring private VLANs
TurboIron(config)#vlan 901
TurboIron(config-vlan-901)#untagged ethernet 5 to 6
TurboIron(config-vlan-901)#pvlan type community
These commands create port-based VLAN 901, add ports 5 and 6 to the VLAN as untagged ports,
then specify that the VLAN is a community private VLAN.
Syntax: untagged ethernet <portnum> [to [<portnum> | ethernet <portnum>]
Syntax: [no] pvlan type community | isolated | primary
The untagged command adds the ports to the VLAN.
The pvlan type command specifies that this port-based VLAN is a private VLAN:
• community – Broadcasts and unknown unicasts received on community ports are sent to the
primary port and also are flooded to the other ports in the community VLAN.
• isolated – Broadcasts and unknown unicasts received on isolated ports are sent only to the
primary port. They are not flooded to other ports in the isolated VLAN.
• primary – The primary private VLAN ports are “promiscuous”. They can communicate with all
the isolated private VLAN ports and community private VLAN ports in the isolated and
community VLANs that are mapped to the promiscuous port.
To configure a community private VLAN on a device enter the following commands.
TurboIron(config)#vlan 901
TurboIron(config-vlan-901)#untagged ethernet 5 to 6
TurboIron(config-vlan-901)#pvlan type community
These commands create port-based VLAN 901, add ports 5 and 6 to the VLAN as untagged ports,
and then specify that the VLAN is a community private VLAN.
To configure a isolated private VLAN on a device , enter the following commands.
TurboIron(config)#vlan 902
TurboIron(config-vlan-902)#tagged ethernet 9 to 10
TurboIron(config-vlan-902)#pvlan type isolated
Configuring the primary VLAN
NOTE
All the ports in the primary private VLAN are active.
Syntax: untagged ethernet <portnum> [to <portnum> | ethernet<portnum>]
Syntax: [no] pvlan type community | isolated | primary
Syntax: [no] pvlan mapping <vlan-id> ethernet <portnum>
The untagged command adds the ports to the VLAN.
The pvlan type command specifies that this port-based VLAN is a private VLAN. Specify primary as
the type.
The pvlan mapping command identifies the other private VLANs for which this VLAN is the primary.
The command also specifies the primary VLAN ports to which you are mapping the other private
VLANs.The parameters of the pvlan mapping command are as follows:
• The <vlan-id> parameter specifies another private VLAN. The other private VLAN you want to
specify must already be configured.